L_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x7, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000300)={0x1, 0x0, &(0x7f00000002c0)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000380)={0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f00000003c0)=[r2, r3, 0x0, 0x0, 0x0, r4, 0x0], 0x7, 0x80800}) (async) syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x501000, 0x0) (async) syz_open_dev$vcsu(&(0x7f00000001c0), 0x5, 0x82000) (async) ioctl$BINDER_WRITE_READ(r6, 0x40046205, 0x0) (async) [ 2496.129129][T24743] binder: 24742:24743 ioctl 541b 0 returned -22 18:25:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x700, 0x0}) 18:25:11 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = getegid() write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000002800)={0x18, 0x0, r1, {0x4}}, 0x18) (async) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000002800)={0x18, 0x0, r1, {0x4}}, 0x18) r3 = getegid() getegid() (async) r4 = getegid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002100)={0x570, 0x0, r1, [{{0x6, 0x0, 0x0, 0x7ff, 0x3, 0x0, {0x3, 0x1, 0x2, 0xa8, 0xffffffffffffffff, 0x1, 0xf6, 0xfd3, 0x20300000, 0x1000, 0x417, 0xee01, 0xffffffffffffffff, 0x400, 0x7e2886de}}, {0x0, 0x3, 0x13, 0xd65, './binderfs/binder1\x00'}}, {{0x5, 0x1, 0x30, 0x6, 0x7, 0x100, {0x3, 0x6, 0x10000, 0x401, 0x5, 0xfff, 0x20, 0x1, 0x6, 0x8000, 0x426c, 0x0, 0x0, 0x100, 0x3}}, {0x2, 0x2, 0x13, 0x6, './binderfs/binder1\x00'}}, {{0x0, 0x0, 0xfffffffffffffffe, 0x6, 0x0, 0x7fa, {0x2, 0x4, 0x0, 0x7, 0xa46d, 0x155, 0xfffffffa, 0x3, 0x7fffffff, 0x6000, 0x7fffffff, 0xee00, r2, 0x3, 0x1}}, {0x6, 0x8, 0x3, 0x4, ')}+'}}, {{0x5, 0x3, 0x4dc0, 0xffff, 0xcdae, 0x3, {0x0, 0x8, 0x1, 0x4, 0x8000, 0x8, 0xfffffbff, 0x2, 0x40, 0x8000, 0x6, 0xffffffffffffffff, 0xee01, 0x3, 0x2}}, {0x2, 0x9, 0x13, 0x80000000, './binderfs/binder1\x00'}}, {{0x3, 0x1, 0x2, 0xc88, 0x101, 0x20, {0x3, 0x2, 0x7, 0xffff, 0x8000, 0xfffffffffffffff8, 0xffffff00, 0x3, 0x5, 0xc000, 0x7, 0xffffffffffffffff, 0x0, 0x8000}}, {0x4, 0x4, 0x13, 0x9, './binderfs/binder1\x00'}}, {{0x0, 0x3, 0x3e5, 0x55f4000000000, 0x20, 0x2, {0x1, 0x1f, 0x5, 0x8000000000000000, 0x7fffffff, 0x4, 0x6, 0x8, 0x6, 0xc000, 0xffff, 0xee01, r3, 0x5, 0x2}}, {0x0, 0x8, 0x13, 0x651, './binderfs/binder1\x00'}}, {{0x5, 0x1, 0x8, 0x7f, 0x1, 0x0, {0x3, 0x3f, 0x9, 0x5b7, 0x5, 0xfff, 0x200, 0x6b8, 0x7, 0x8000, 0x800, 0xee00, r4, 0x1, 0x800}}, {0x4, 0x9, 0x13, 0x5, './binderfs/binder1\x00'}}, {{0x4, 0x0, 0x50, 0x0, 0xffffffff, 0xcc, {0x0, 0x5, 0x8000000000000001, 0xfff00000000, 0x4, 0x7, 0x7fffffff, 0x1, 0x5, 0x1d00704a72764a0, 0x1, 0xee01, 0xee00, 0x401, 0x5}}, {0x2, 0x4, 0x2, 0x2, ']!'}}]}, 0x570) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x2c, r6, 0x207, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000002680)={0x11c, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffbff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x23}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000041) 18:25:11 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@release], 0x0, 0x0, 0x0}) 18:25:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 18:25:11 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) (async) r1 = socket$caif_stream(0x25, 0x1, 0x0) connect$caif(r1, &(0x7f0000000040)=@rfm={0x25, 0x0, "03982098d8ec99e544da886e9ce9fc53"}, 0x18) (async) socket$caif_stream(0x25, 0x1, 0x3) socket$rxrpc(0x21, 0x2, 0x2) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000180)={0x8}) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x4, 0x80) (async) r3 = socket$caif_stream(0x25, 0x1, 0x0) connect$caif(r3, &(0x7f0000000040)=@rfm={0x25, 0x0, "03982098d8ec99e544da886e9ce9fc53"}, 0x18) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0xfffffffffffffec1) 18:25:11 executing program 3: mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 18:25:11 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0) 18:25:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2000000, 0x0}) 18:25:11 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x7ff, 0x200400) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xffffffffffffff5e, 0x0, &(0x7f0000000100)=[@release], 0x0, 0x0, 0x0}) [ 2496.477874][T24770] binder: 24767:24770 ioctl 541b 0 returned -22 [ 2496.505143][T24772] binder: 24767:24772 ioctl 541b 0 returned -22 18:25:11 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) 18:25:11 executing program 3: mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 18:25:11 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=""/13, 0xd, 0x2020, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x3000000, 0x0}) 18:25:11 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0) 18:25:11 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x7ff, 0x200400) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xffffffffffffff5e, 0x0, &(0x7f0000000100)=[@release], 0x0, 0x0, 0x0}) [ 2496.768239][T24785] binder: 24784:24785 ioctl 541b 0 returned -22 18:25:11 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 18:25:11 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) (async) 18:25:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4000000, 0x0}) 18:25:11 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0) 18:25:11 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x7ff, 0x200400) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xffffffffffffff5e, 0x0, &(0x7f0000000100)=[@release], 0x0, 0x0, 0x0}) 18:25:11 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=""/13, 0xd, 0x2020, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:12 executing program 2: ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)=0x8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000180)={'\x00', 0x0, 0x3, 0x48c53800}) bind$isdn(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0xfd, 0xb1, 0x1f, 0xb2}, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:12 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 18:25:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x5000000, 0x0}) 18:25:12 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) [ 2497.044125][T24807] binder: 24803:24807 ioctl 541b 0 returned -22 [ 2497.068903][T24807] binder: 24803:24807 ioctl 541b 0 returned -22 18:25:12 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=""/13, 0xd, 0x2020, 0x0, 0x0) (async) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=""/13, 0xd, 0x2020, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:12 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) 18:25:12 executing program 2: ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)=0x8) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000180)={'\x00', 0x0, 0x3, 0x48c53800}) (async, rerun: 32) bind$isdn(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0xfd, 0xb1, 0x1f, 0xb2}, 0x6) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:12 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) [ 2497.295787][T24820] binder: 24814:24820 ioctl 40046205 0 returned -22 18:25:12 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6000000, 0x0}) [ 2497.338754][T24824] binder: 24822:24824 ioctl 541b 0 returned -22 [ 2497.351597][T24825] binder: 24822:24825 ioctl 541b 0 returned -22 18:25:12 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async) 18:25:12 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000000)={0x20, 0x9, 0x7, 0x2}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000000c0)={0x0, 0x1ff, 0xc0, {0x0, 0x73e}, 0x80, 0x800}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x2) 18:25:12 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 18:25:12 executing program 2: ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)=0x8) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000180)={'\x00', 0x0, 0x3, 0x48c53800}) (async) bind$isdn(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0xfd, 0xb1, 0x1f, 0xb2}, 0x6) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:12 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7000000, 0x0}) [ 2497.586091][T24837] binder: 24835:24837 ioctl 541b 0 returned -22 [ 2497.605016][T24838] binder: 24836:24838 ioctl 40046205 0 returned -22 18:25:12 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) (async) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000000)={0x20, 0x9, 0x7, 0x2}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000006c0)={0x101}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000000c0)={0x0, 0x1ff, 0xc0, {0x0, 0x73e}, 0x80, 0x800}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x2) [ 2497.650497][T24842] binder: 24836:24842 ioctl 40046205 0 returned -22 18:25:12 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 18:25:12 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfdfdffff, 0x0}) 18:25:12 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f00000000c0)=[@dead_binder_done], 0x0, 0x0, 0x0}) 18:25:12 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 2497.815293][T24851] binder: 24849:24851 ioctl 541b 0 returned -22 18:25:12 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfffffdfd, 0x0}) 18:25:12 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000000)={0x20, 0x9, 0x7, 0x2}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000006c0)={0x101}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000000c0)={0x0, 0x1ff, 0xc0, {0x0, 0x73e}, 0x80, 0x800}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x2) 18:25:12 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 18:25:12 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f00000000c0)=[@dead_binder_done], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f00000000c0)=[@dead_binder_done], 0x0, 0x0, 0x0}) (async) 18:25:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xffffff7f, 0x0}) [ 2498.019915][T24861] binder: 24860:24861 ioctl 40046205 0 returned -22 [ 2498.037251][T24865] binder: 24860:24865 ioctl 40046205 0 returned -22 18:25:13 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1}, 0x2) 18:25:13 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (rerun: 32) 18:25:13 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f00000000c0)=[@dead_binder_done], 0x0, 0x0, 0x0}) 18:25:13 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) [ 2498.248092][T24880] binder: 24879:24880 ioctl 40046205 0 returned -22 18:25:13 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6000000, 0x0}) 18:25:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000000000, 0x0}) 18:25:13 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1}, 0x2) 18:25:13 executing program 2: openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="34aa7d654c0673f7d86e91080004406b610000"], 0x0, 0x0, 0x0}) 18:25:13 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000500)={0x0, 0x1}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000540)={0x1}, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xa, 0x35000) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000040)={0xa4f37ada4a2a4471, 0xa}, 0x0) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x0, {0x80}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r5, &(0x7f0000002240)={0x18, 0x0, r6}, 0x18) write$FUSE_WRITE(r5, &(0x7f0000000180)={0x18, 0x0, 0x0, {0x8001}}, 0x18) landlock_restrict_self(r3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 2498.446554][T24888] binder: 24886:24888 ioctl 40046205 0 returned -22 18:25:13 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1}, 0x2) 18:25:13 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) [ 2498.534373][T24896] binder: 24895:24896 unknown command 1702734388 18:25:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x100000000000000, 0x0}) [ 2498.577906][T24896] binder: 24895:24896 ioctl c0306201 20000000 returned -22 18:25:13 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:13 executing program 2: openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="34aa7d654c0673f7d86e91080004406b610000"], 0x0, 0x0, 0x0}) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="34aa7d654c0673f7d86e91080004406b610000"], 0x0, 0x0, 0x0}) (async) [ 2498.663660][T24899] binder: 24897:24899 ioctl 40046205 0 returned -22 [ 2498.679071][T24900] binder: 24898:24900 ioctl 40046205 0 returned -22 18:25:13 executing program 3: sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80002200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xa8, 0x0, 0x803, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x32b}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe1fe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x103f}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd9f}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20004010}, 0x84) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000ac2e79312d79fc472890969939c8290dc1292c01cdf0d656f69f151b93ef36c02b0e3ed130db84871c9e3336e8bd8d90210389a90208f981c6e7dbe9b0f2194eaa4d41b4dbe785c39feea236549a056280b1b74470cbcb26d390091c97f86318ffd16492ea"], 0x0, 0x0, 0x0}) 18:25:13 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) (async) 18:25:13 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001100)=0x1, 0x4) syz_open_dev$vcsu(&(0x7f00000010c0), 0x5153, 0x2000) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) sendto$isdn(r1, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1008, 0x4044090, &(0x7f0000001080)={0x22, 0x4, 0x20, 0x4, 0x7c}, 0x6) 18:25:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x200000000000000, 0x0}) 18:25:13 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r2, &(0x7f0000002240)={0x18, 0x0, r3}, 0x18) write$FUSE_OPEN(r2, &(0x7f0000000040)={0x20}, 0x20) [ 2498.846552][T24911] binder: 24910:24911 unknown command 1702734388 [ 2498.891564][T24911] binder: 24910:24911 ioctl c0306201 20000000 returned -22 [ 2498.913882][T24914] binder: 24909:24914 unknown command 0 [ 2498.930665][T24917] binder: 24910:24917 unknown command 1702734388 18:25:13 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001100)=0x1, 0x4) syz_open_dev$vcsu(&(0x7f00000010c0), 0x5153, 0x2000) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) sendto$isdn(r1, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1008, 0x4044090, &(0x7f0000001080)={0x22, 0x4, 0x20, 0x4, 0x7c}, 0x6) [ 2498.950669][T24914] binder: 24909:24914 ioctl c0306201 20000000 returned -22 18:25:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x300000000000000, 0x0}) 18:25:13 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r2, 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000040)=[0x4, 0x4], 0x2) ioctl$BINDER_WRITE_READ(r1, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) [ 2498.993813][T24917] binder: 24910:24917 ioctl c0306201 20000000 returned -22 18:25:14 executing program 3: sendto$rose(0xffffffffffffffff, &(0x7f0000000180)="4b209f996fbef0daba39bdb8f7e0e6e90c47418650dcac59fbe1f5f93bcada35a06782f71440dc279da932af59afea036c85f490d0ca19cfca9388a9519e22f3f3896ef903bdf43e928595a03b24868b4d8998937f99a7cb77b495f2bed3b78793cbbd2111b5cee7c490eb4aacb2da3ed4fe8b100a170cce021b49d3fd83f9396ca0633bde3a28c9a82b35e3816ea9a9de2cb44ea24180c2a1592e195f8b6b77dc13eca2aab8d9e7768f23b66cde4ec60da62c62fc6f", 0xb6, 0x4000004, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0663e33f531eeb0140010000000083719dc7be6e0dab6ab2b2fefffbca5899093bf9196981a3c053f1f6b33c91380ed9"], 0x0, 0x0, 0x0}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x701100, 0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000100)) 18:25:14 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r2, &(0x7f0000002240)={0x18, 0x0, r3}, 0x18) write$FUSE_OPEN(r2, &(0x7f0000000040)={0x20}, 0x20) 18:25:14 executing program 2: openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="34aa7d654c0673f7d86e91080004406b610000"], 0x0, 0x0, 0x0}) 18:25:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x400000000000000, 0x0}) 18:25:14 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001100)=0x1, 0x4) (async) syz_open_dev$vcsu(&(0x7f00000010c0), 0x5153, 0x2000) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) sendto$isdn(r1, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1008, 0x4044090, &(0x7f0000001080)={0x22, 0x4, 0x20, 0x4, 0x7c}, 0x6) [ 2499.154567][T24927] binder: 24924:24927 ioctl 541b 0 returned -22 [ 2499.191747][T24932] binder: 24930:24932 unknown command 1702734388 18:25:14 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) (async) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 32) r2 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r2, 0x0, 0x0) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000040)=[0x4, 0x4], 0x2) (async) ioctl$BINDER_WRITE_READ(r1, 0x541b, 0x0) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) (rerun: 64) [ 2499.203159][T24932] binder: 24930:24932 ioctl c0306201 20000000 returned -22 [ 2499.226066][T24933] binder: 24931:24933 unknown command 1071866630 [ 2499.245464][T24933] binder: 24931:24933 ioctl c0306201 20000000 returned -22 18:25:14 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7fff, 0x11b002) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r3, &(0x7f0000002240)={0x18, 0x0, r4}, 0x18) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x27, 0xae, 0x3031000, 0x1, 0x7f, 0x4c, 0x6}}, 0x50) 18:25:14 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async, rerun: 32) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 32) write$FUSE_LSEEK(r2, &(0x7f0000002240)={0x18, 0x0, r3}, 0x18) write$FUSE_OPEN(r2, &(0x7f0000000040)={0x20}, 0x20) 18:25:14 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x500000000000000, 0x0}) 18:25:14 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) 18:25:14 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) (async) r2 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r2, 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000040)=[0x4, 0x4], 0x2) ioctl$BINDER_WRITE_READ(r1, 0x541b, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) 18:25:14 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7fff, 0x11b002) (async, rerun: 64) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r3, &(0x7f0000002240)={0x18, 0x0, r4}, 0x18) (async) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x27, 0xae, 0x3031000, 0x1, 0x7f, 0x4c, 0x6}}, 0x50) 18:25:14 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x90, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x2, 0x0, 0x39}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/28, 0x1c, 0x2, 0x4}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x20, 0x48}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@weak_handle={0x77682a85, 0x101, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/66, 0x42, 0x2, 0x6}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}], 0xb9, 0x0, &(0x7f0000000380)="f99c4153137facea0e2a99e9c2b92735a86ca14ce13482de3c7b74867a692f7e11ccc275d4b4070de603089316488c311b7c5185693892a340f52140c24faf908cda4b1b4f76cfc228dc3ab738940dd3d526e998fb8b1ae36f0ad5358c3cf49beb8519817fbf7524db87cb99f9f4582e9208a70d0f7367158e882857190dfa23535e299d9122768e2204bc66b658fd7513ea0bfcf991742f1d777f37857839328a6bda4f5718b702fd19e936c4674ac0d93adb26c676e9bf4a"}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}, {0x3, 0x40}, 0x1, 0x1, 0x2}) [ 2499.568948][T24954] binder: 24948:24954 ioctl 40046205 0 returned -22 18:25:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x600000000000000, 0x0}) 18:25:14 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) 18:25:14 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x90, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x2, 0x0, 0x39}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/28, 0x1c, 0x2, 0x4}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x20, 0x48}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@weak_handle={0x77682a85, 0x101, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/66, 0x42, 0x2, 0x6}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}], 0xb9, 0x0, &(0x7f0000000380)="f99c4153137facea0e2a99e9c2b92735a86ca14ce13482de3c7b74867a692f7e11ccc275d4b4070de603089316488c311b7c5185693892a340f52140c24faf908cda4b1b4f76cfc228dc3ab738940dd3d526e998fb8b1ae36f0ad5358c3cf49beb8519817fbf7524db87cb99f9f4582e9208a70d0f7367158e882857190dfa23535e299d9122768e2204bc66b658fd7513ea0bfcf991742f1d777f37857839328a6bda4f5718b702fd19e936c4674ac0d93adb26c676e9bf4a"}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}, {0x3, 0x40}, 0x1, 0x1, 0x2}) [ 2499.648064][T24958] binder: 24955:24958 ioctl 541b 0 returned -22 [ 2499.664062][T24956] binder: 24955:24956 ioctl 541b 0 returned -22 [ 2499.680247][T24961] binder: 24960:24961 ioctl 40046205 0 returned -22 18:25:14 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x801, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) 18:25:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x700000000000000, 0x0}) [ 2499.841956][T24966] binder: 24965:24966 ioctl 40046205 0 returned -22 [ 2499.879248][T24968] binder: 24967:24968 ioctl 40046205 0 returned -22 18:25:15 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) 18:25:15 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7fff, 0x11b002) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r3, &(0x7f0000002240)={0x18, 0x0, r4}, 0x18) (async) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x27, 0xae, 0x3031000, 0x1, 0x7f, 0x4c, 0x6}}, 0x50) 18:25:15 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x801, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) 18:25:15 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x90, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x2, 0x0, 0x39}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/28, 0x1c, 0x2, 0x4}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x20, 0x48}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@weak_handle={0x77682a85, 0x101, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/66, 0x42, 0x2, 0x6}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}], 0xb9, 0x0, &(0x7f0000000380)="f99c4153137facea0e2a99e9c2b92735a86ca14ce13482de3c7b74867a692f7e11ccc275d4b4070de603089316488c311b7c5185693892a340f52140c24faf908cda4b1b4f76cfc228dc3ab738940dd3d526e998fb8b1ae36f0ad5358c3cf49beb8519817fbf7524db87cb99f9f4582e9208a70d0f7367158e882857190dfa23535e299d9122768e2204bc66b658fd7513ea0bfcf991742f1d777f37857839328a6bda4f5718b702fd19e936c4674ac0d93adb26c676e9bf4a"}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}, {0x3, 0x40}, 0x1, 0x1, 0x2}) 18:25:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfdfdffff00000000, 0x0}) 18:25:15 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x3ff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xffffff7f00000000, 0x0}) [ 2500.466981][T24984] binder: 24976:24984 ioctl 40046205 0 returned -22 [ 2500.479286][T24985] binder: 24978:24985 ioctl 40046205 0 returned -22 18:25:15 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x801, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) 18:25:15 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x3ff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) (async) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x3ff) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) [ 2500.526859][T24987] binder: 24976:24987 ioctl 40046205 0 returned -22 18:25:15 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x90, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x2, 0x0, 0x39}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/28, 0x1c, 0x2, 0x4}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x20, 0x48}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@weak_handle={0x77682a85, 0x101, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/66, 0x42, 0x2, 0x6}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}], 0xb9, 0x0, &(0x7f0000000380)="f99c4153137facea0e2a99e9c2b92735a86ca14ce13482de3c7b74867a692f7e11ccc275d4b4070de603089316488c311b7c5185693892a340f52140c24faf908cda4b1b4f76cfc228dc3ab738940dd3d526e998fb8b1ae36f0ad5358c3cf49beb8519817fbf7524db87cb99f9f4582e9208a70d0f7367158e882857190dfa23535e299d9122768e2204bc66b658fd7513ea0bfcf991742f1d777f37857839328a6bda4f5718b702fd19e936c4674ac0d93adb26c676e9bf4a"}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}, {0x3, 0x40}, 0x1, 0x1, 0x2}) 18:25:15 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x501800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000180)=[0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, r1, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x901, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000140)=0x1) ioctl$SNDCTL_TMR_SELECT(r3, 0x40045408) 18:25:15 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x3) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x180800, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000000c0), 0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, 0x0) bind$isdn(r2, &(0x7f0000000100)={0x22, 0x7, 0x6, 0xff, 0x1}, 0x6) 18:25:15 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x3) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) [ 2500.729940][T24993] binder: 24992:24993 ioctl 40046205 0 returned -22 18:25:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000300)={0x1, 0x6c}, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[r3], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000240)) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f00000001c0)={r6}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:15 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x90, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x2, 0x0, 0x39}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/28, 0x1c, 0x2, 0x4}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x20, 0x48}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@weak_handle={0x77682a85, 0x101, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/66, 0x42, 0x2, 0x6}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}], 0xb9, 0x0, &(0x7f0000000380)="f99c4153137facea0e2a99e9c2b92735a86ca14ce13482de3c7b74867a692f7e11ccc275d4b4070de603089316488c311b7c5185693892a340f52140c24faf908cda4b1b4f76cfc228dc3ab738940dd3d526e998fb8b1ae36f0ad5358c3cf49beb8519817fbf7524db87cb99f9f4582e9208a70d0f7367158e882857190dfa23535e299d9122768e2204bc66b658fd7513ea0bfcf991742f1d777f37857839328a6bda4f5718b702fd19e936c4674ac0d93adb26c676e9bf4a"}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}, {0x3, 0x40}, 0x1, 0x1, 0x2}) 18:25:15 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x3ff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:15 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x501800, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000180)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, r1, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800}) (async) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x901, 0x0) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000140)=0x1) ioctl$SNDCTL_TMR_SELECT(r3, 0x40045408) 18:25:15 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x3) (async) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) [ 2500.847257][T25001] binder: 25000:25001 ioctl 541b 0 returned -22 [ 2500.877235][T25002] binder: 24998:25002 ioctl 40046205 0 returned -22 18:25:15 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x3) (async) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x3) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x180800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x180800, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000000c0), 0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, 0x0) bind$isdn(r2, &(0x7f0000000100)={0x22, 0x7, 0x6, 0xff, 0x1}, 0x6) 18:25:16 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000080)={0x8, r1}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f0000000100)="4bd48cfef23d58ead3420e42056cda17cf28602b9bb716a5dbe9e0e127fe2584c4f9dc338a9aaa8f42101348ca7bc4e01421af9014389503d88004a5390f867df4b52017c32f4750433468ddeccc7c519fb441127a6e50b3ec3b93838be48d4cb19af159adf5d91b259ca1ce4be84d9b92a52014fd82abeab9568c3591de9c29a48833b5ef3fd6bb63678b54f20fdbfc4a813804", 0x94, 0x9a4}) 18:25:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, 0x0) (async) r2 = openat$userio(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000300)={0x1, 0x6c}, 0x2) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[r3], 0x1, 0x800, 0x0, 0xffffffffffffffff}) (async) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 64) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000240)) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f00000001c0)={r6}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2500.994128][T25006] binder: 25004:25006 ioctl 40046205 0 returned -22 18:25:16 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x90, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x2, 0x0, 0x39}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/28, 0x1c, 0x2, 0x4}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x20, 0x48}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@weak_handle={0x77682a85, 0x101, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/66, 0x42, 0x2, 0x6}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}], 0xb9, 0x0, &(0x7f0000000380)="f99c4153137facea0e2a99e9c2b92735a86ca14ce13482de3c7b74867a692f7e11ccc275d4b4070de603089316488c311b7c5185693892a340f52140c24faf908cda4b1b4f76cfc228dc3ab738940dd3d526e998fb8b1ae36f0ad5358c3cf49beb8519817fbf7524db87cb99f9f4582e9208a70d0f7367158e882857190dfa23535e299d9122768e2204bc66b658fd7513ea0bfcf991742f1d777f37857839328a6bda4f5718b702fd19e936c4674ac0d93adb26c676e9bf4a"}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}, {0x3, 0x40}, 0x1, 0x1, 0x2}) [ 2501.064367][T25013] binder: 25011:25013 ioctl 541b 0 returned -22 18:25:16 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x3) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) [ 2501.119638][T25018] binder: 25017:25018 ioctl 40046205 0 returned -22 18:25:16 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x501800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000180)=[0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, r1, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x901, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000140)=0x1) ioctl$SNDCTL_TMR_SELECT(r3, 0x40045408) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x501800, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000180)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, r1, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x901, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000140)=0x1) (async) ioctl$SNDCTL_TMR_SELECT(r3, 0x40045408) (async) 18:25:16 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x3) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x180800, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000000c0), 0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, 0x0) (async) bind$isdn(r2, &(0x7f0000000100)={0x22, 0x7, 0x6, 0xff, 0x1}, 0x6) [ 2501.211238][T25024] binder: 25021:25024 ioctl 40046205 0 returned -22 18:25:16 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000080)={0x8, r1}) (async) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f0000000100)="4bd48cfef23d58ead3420e42056cda17cf28602b9bb716a5dbe9e0e127fe2584c4f9dc338a9aaa8f42101348ca7bc4e01421af9014389503d88004a5390f867df4b52017c32f4750433468ddeccc7c519fb441127a6e50b3ec3b93838be48d4cb19af159adf5d91b259ca1ce4be84d9b92a52014fd82abeab9568c3591de9c29a48833b5ef3fd6bb63678b54f20fdbfc4a813804", 0x94, 0x9a4}) 18:25:16 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x90, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x2, 0x0, 0x39}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/28, 0x1c, 0x2, 0x4}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x20, 0x48}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@weak_handle={0x77682a85, 0x101, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/66, 0x42, 0x2, 0x6}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}], 0xb9, 0x0, &(0x7f0000000380)="f99c4153137facea0e2a99e9c2b92735a86ca14ce13482de3c7b74867a692f7e11ccc275d4b4070de603089316488c311b7c5185693892a340f52140c24faf908cda4b1b4f76cfc228dc3ab738940dd3d526e998fb8b1ae36f0ad5358c3cf49beb8519817fbf7524db87cb99f9f4582e9208a70d0f7367158e882857190dfa23535e299d9122768e2204bc66b658fd7513ea0bfcf991742f1d777f37857839328a6bda4f5718b702fd19e936c4674ac0d93adb26c676e9bf4a"}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}, {0x3, 0x40}, 0x1, 0x1, 0x2}) [ 2501.261631][T25027] binder: 25026:25027 ioctl 541b 0 returned -22 [ 2501.350819][T25032] binder: 25031:25032 ioctl 40046205 0 returned -22 18:25:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000300)={0x1, 0x6c}, 0x2) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[r3], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f00000001c0)={r6}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:16 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000002400), 0x3d67, 0x8600) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000002440)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000022c0)={0x3, 0x0, &(0x7f0000002280)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000002340)={0x5, 0x0, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, r2, r3, 0x0, 0x0, 0x0], 0x7, 0x1000, 0x0, 0xffffffffffffffff}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f00000000c0)=0x2, 0x4) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_BMAP(r5, &(0x7f0000000140)={0x18, 0xffffffffffffffda, 0x0, {0x7}}, 0x18) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000002540)={0x1, 0x6d}, 0x2) write$FUSE_LSEEK(r8, &(0x7f0000002240)={0x18, 0xfffffffffffffff5, r9}, 0x18) write$FUSE_IOCTL(r6, &(0x7f00000001c0)={0x20, 0x0, r9, {0x200, 0x0, 0x92, 0x20}}, 0x20) r12 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r13 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r12, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r13, &(0x7f0000002240)={0x18, 0x0, r14}, 0x18) write$FUSE_ATTR(r12, &(0x7f0000002580)={0x78, 0x0, r9, {0x30000000, 0x5, 0x0, {0x6, 0x0, 0xfffffffffffffffe, 0xffffffffffffff06, 0x6, 0xe, 0x4, 0x8001, 0x4, 0x4000, 0x5, r10, r11, 0x1}}}, 0x78) write$FUSE_INIT(r6, &(0x7f0000002380)={0x50, 0x0, r14, {0x7, 0x27, 0x401, 0x1850002, 0x2, 0x1, 0x8000, 0x7f}}, 0x50) r15 = openat$cuse(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0) r16 = getegid() r17 = geteuid() read$FUSE(r13, &(0x7f0000008700)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f000000a740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f000000c780)=ANY=[@ANYBLOB="9002000000000000", @ANYRES64=0x0, @ANYBLOB="01000000000000000000000000000000ff0000000000000000080000000000000004000000000000060000fc00000000000000000000000000000100000000000500000000000000ff0100000000000000010000000000005c0c000005000000050000000000000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03000000030000000000000003000000000000001f000000000000000a000000010001002f6465762f63757365000000000000000600000000000000030000000000000003000000000000000700000000000000080000000101000005000000000000002af2376700000000b100000000000000010000000000000003000000000000000500000000000000a1db000080000000001000000080000006000000", @ANYRES32=0x0, @ANYRES32=r16, @ANYBLOB="03000000ff070000000000000200000000000000040000000000000001000000090000000000000000000000000000000000000000000000000000001575000000000000000000000000000102000000c38f00000500000000000000070000000000000000000000000000000104000000000000020000000000000004000000000000001f00000002000000000100000020000048340000", @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB="04000000000000000000000004000000000000000600000000000000000000000500000004000000000000000000000000000000c0ffffffffffffff090000000000000000020000000000080000000000000000f10000000000000000000000000000800800000000000000917e00000000000001000000000000800200000005000000010000000020000001000000", @ANYRES32=r10, @ANYRES32=r19, @ANYBLOB="04000000dc540000000000000200000000000000200000000000000001000000faffffff2f00000000000000"], 0x290) write$FUSE_LSEEK(r15, &(0x7f0000002500)={0x18, 0x0, r9, {0xffffffffffffffae}}, 0x18) 18:25:16 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) (rerun: 64) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000080)={0x8, r1}) (async) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f0000000100)="4bd48cfef23d58ead3420e42056cda17cf28602b9bb716a5dbe9e0e127fe2584c4f9dc338a9aaa8f42101348ca7bc4e01421af9014389503d88004a5390f867df4b52017c32f4750433468ddeccc7c519fb441127a6e50b3ec3b93838be48d4cb19af159adf5d91b259ca1ce4be84d9b92a52014fd82abeab9568c3591de9c29a48833b5ef3fd6bb63678b54f20fdbfc4a813804", 0x94, 0x9a4}) 18:25:16 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000080)={0x8, r1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r4, 0x40096100, &(0x7f0000000640)={{&(0x7f00000005c0)={'Accelerator1\x00', {&(0x7f0000000500)=@adf_str={@normal='NumberDcInstances\x00', {"4dca1b3a9cf4044632cdcfc7776268b2fb19413da1691390279de11337196f25eede2391ec6ccd98641745f4e5529d4f962af002863d1efb3f1e667453c415ce"}, {&(0x7f0000000440)=@adf_hex={@normal='NumberCyInstances\x00', {0x200}}}}}}}, 0x81}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0xa4000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000002c0)={0xc, 0x0}) read$FUSE(r2, &(0x7f0000000740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r2, &(0x7f0000000680)={0x18, 0x0, r8, {0x7}}, 0x18) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r6, 0x3ba0, &(0x7f0000000300)={0x38, 0x6, r7}) ioctl$IOMMU_DESTROY$device(0xffffffffffffffff, 0x3b80, &(0x7f0000000400)={0x8}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000240)={0x28, 0x5, r5, 0x0, &(0x7f0000000200)="27a7c6d9b74634bb920d14bbca620a14f232fdec06c9c63190f3", 0x1a, 0x3}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0x40046205, 0x0) [ 2501.450324][T25042] binder: 25039:25042 ioctl 40046205 0 returned -22 18:25:16 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x90, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x2, 0x0, 0x39}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/28, 0x1c, 0x2, 0x4}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x20, 0x48}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@weak_handle={0x77682a85, 0x101, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/66, 0x42, 0x2, 0x6}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}], 0xb9, 0x0, &(0x7f0000000380)="f99c4153137facea0e2a99e9c2b92735a86ca14ce13482de3c7b74867a692f7e11ccc275d4b4070de603089316488c311b7c5185693892a340f52140c24faf908cda4b1b4f76cfc228dc3ab738940dd3d526e998fb8b1ae36f0ad5358c3cf49beb8519817fbf7524db87cb99f9f4582e9208a70d0f7367158e882857190dfa23535e299d9122768e2204bc66b658fd7513ea0bfcf991742f1d777f37857839328a6bda4f5718b702fd19e936c4674ac0d93adb26c676e9bf4a"}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}, {0x3, 0x40}, 0x1, 0x1, 0x2}) 18:25:16 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) [ 2501.569739][T25046] binder: 25043:25046 ioctl 541b 0 returned -22 18:25:16 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef6, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2501.619119][T25051] binder: 25048:25051 ioctl 40046205 0 returned -22 18:25:16 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000002400), 0x3d67, 0x8600) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000002440)) (async) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000002440)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000022c0)={0x3, 0x0, &(0x7f0000002280)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000002340)={0x5, 0x0, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, r2, r3, 0x0, 0x0, 0x0], 0x7, 0x1000, 0x0, 0xffffffffffffffff}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f00000000c0)=0x2, 0x4) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_BMAP(r5, &(0x7f0000000140)={0x18, 0xffffffffffffffda, 0x0, {0x7}}, 0x18) (async) write$FUSE_BMAP(r5, &(0x7f0000000140)={0x18, 0xffffffffffffffda, 0x0, {0x7}}, 0x18) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000002540)={0x1, 0x6d}, 0x2) (async) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000002540)={0x1, 0x6d}, 0x2) write$FUSE_LSEEK(r8, &(0x7f0000002240)={0x18, 0xfffffffffffffff5, r9}, 0x18) write$FUSE_IOCTL(r6, &(0x7f00000001c0)={0x20, 0x0, r9, {0x200, 0x0, 0x92, 0x20}}, 0x20) r12 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r13 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r12, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r13, &(0x7f0000002240)={0x18, 0x0, r14}, 0x18) (async) write$FUSE_LSEEK(r13, &(0x7f0000002240)={0x18, 0x0, r14}, 0x18) write$FUSE_ATTR(r12, &(0x7f0000002580)={0x78, 0x0, r9, {0x30000000, 0x5, 0x0, {0x6, 0x0, 0xfffffffffffffffe, 0xffffffffffffff06, 0x6, 0xe, 0x4, 0x8001, 0x4, 0x4000, 0x5, r10, r11, 0x1}}}, 0x78) (async) write$FUSE_ATTR(r12, &(0x7f0000002580)={0x78, 0x0, r9, {0x30000000, 0x5, 0x0, {0x6, 0x0, 0xfffffffffffffffe, 0xffffffffffffff06, 0x6, 0xe, 0x4, 0x8001, 0x4, 0x4000, 0x5, r10, r11, 0x1}}}, 0x78) write$FUSE_INIT(r6, &(0x7f0000002380)={0x50, 0x0, r14, {0x7, 0x27, 0x401, 0x1850002, 0x2, 0x1, 0x8000, 0x7f}}, 0x50) r15 = openat$cuse(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0) r16 = getegid() r17 = geteuid() read$FUSE(r13, &(0x7f0000008700)={0x2020}, 0x2020) (async) read$FUSE(r13, &(0x7f0000008700)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f000000a740)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f000000a740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f000000c780)=ANY=[@ANYBLOB="9002000000000000", @ANYRES64=0x0, @ANYBLOB="01000000000000000000000000000000ff0000000000000000080000000000000004000000000000060000fc00000000000000000000000000000100000000000500000000000000ff0100000000000000010000000000005c0c000005000000050000000000000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03000000030000000000000003000000000000001f000000000000000a000000010001002f6465762f63757365000000000000000600000000000000030000000000000003000000000000000700000000000000080000000101000005000000000000002af2376700000000b100000000000000010000000000000003000000000000000500000000000000a1db000080000000001000000080000006000000", @ANYRES32=0x0, @ANYRES32=r16, @ANYBLOB="03000000ff070000000000000200000000000000040000000000000001000000090000000000000000000000000000000000000000000000000000001575000000000000000000000000000102000000c38f00000500000000000000070000000000000000000000000000000104000000000000020000000000000004000000000000001f00000002000000000100000020000048340000", @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB="04000000000000000000000004000000000000000600000000000000000000000500000004000000000000000000000000000000c0ffffffffffffff090000000000000000020000000000080000000000000000f10000000000000000000000000000800800000000000000917e00000000000001000000000000800200000005000000010000000020000001000000", @ANYRES32=r10, @ANYRES32=r19, @ANYBLOB="04000000dc540000000000000200000000000000200000000000000001000000faffffff2f00000000000000"], 0x290) write$FUSE_LSEEK(r15, &(0x7f0000002500)={0x18, 0x0, r9, {0xffffffffffffffae}}, 0x18) (async) write$FUSE_LSEEK(r15, &(0x7f0000002500)={0x18, 0x0, r9, {0xffffffffffffffae}}, 0x18) 18:25:16 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000180)={0x8}) (async, rerun: 32) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) (rerun: 32) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000080)={0x8, r1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x2}) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r4, 0x40096100, &(0x7f0000000640)={{&(0x7f00000005c0)={'Accelerator1\x00', {&(0x7f0000000500)=@adf_str={@normal='NumberDcInstances\x00', {"4dca1b3a9cf4044632cdcfc7776268b2fb19413da1691390279de11337196f25eede2391ec6ccd98641745f4e5529d4f962af002863d1efb3f1e667453c415ce"}, {&(0x7f0000000440)=@adf_hex={@normal='NumberCyInstances\x00', {0x200}}}}}}}, 0x81}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) (async, rerun: 64) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0xa4000, 0x0) (rerun: 64) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000002c0)={0xc, 0x0}) read$FUSE(r2, &(0x7f0000000740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r2, &(0x7f0000000680)={0x18, 0x0, r8, {0x7}}, 0x18) (async) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r6, 0x3ba0, &(0x7f0000000300)={0x38, 0x6, r7}) (async) ioctl$IOMMU_DESTROY$device(0xffffffffffffffff, 0x3b80, &(0x7f0000000400)={0x8}) (async) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000240)={0x28, 0x5, r5, 0x0, &(0x7f0000000200)="27a7c6d9b74634bb920d14bbca620a14f232fdec06c9c63190f3", 0x1a, 0x3}) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0x40046205, 0x0) 18:25:16 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}, {0x3, 0x40}, 0x1, 0x1, 0x2}) 18:25:16 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:16 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000040)={{&(0x7f0000000480)={'GENERAL\x00', {&(0x7f00000001c0)=@adf_str={@bank={'Bank', '1', 'CoreAffinity\x00'}, {"c452da26223d2820e3d54c302bf5bce229c25d37ef259b2115c359edeaeced53eadc2a5e63d619e7bf01ba40df4f73ea32edf3639253cf6a7cb7cc0086c39695"}, {&(0x7f0000000100)=@adf_dec={@bank={'Bank', '0', 'InterruptCoalescingNumResponses\x00'}, {0xd37}}}}}, {&(0x7f0000000400)={'KERNEL\x00', {&(0x7f0000000340)=@adf_hex={@format={'Cy', '3', 'RingAsymRx\x00'}, {}, {&(0x7f0000000280)=@adf_dec={@bank={'Bank', '4', 'InterruptCoalescingTimerNs\x00'}}}}}}}}}, 0x5}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000500)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) r4 = eventfd2(0x0, 0x0) write$eventfd(r4, &(0x7f0000000080), 0x8) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000640)={{0x9}, 'port1\x00', 0x0, 0x1020, 0x4, 0x8, 0x6, 0x1f, 0xe9, 0x0, 0x4}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000600)={r3, 0x60000, 0x8, r4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:16 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef6, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef6, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) [ 2501.847791][T25063] binder: 25061:25063 ioctl 541b 0 returned -22 18:25:16 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}, {0x3, 0x40}, 0x1, 0x1, 0x2}) 18:25:16 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:16 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) (async) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000040)={{&(0x7f0000000480)={'GENERAL\x00', {&(0x7f00000001c0)=@adf_str={@bank={'Bank', '1', 'CoreAffinity\x00'}, {"c452da26223d2820e3d54c302bf5bce229c25d37ef259b2115c359edeaeced53eadc2a5e63d619e7bf01ba40df4f73ea32edf3639253cf6a7cb7cc0086c39695"}, {&(0x7f0000000100)=@adf_dec={@bank={'Bank', '0', 'InterruptCoalescingNumResponses\x00'}, {0xd37}}}}}, {&(0x7f0000000400)={'KERNEL\x00', {&(0x7f0000000340)=@adf_hex={@format={'Cy', '3', 'RingAsymRx\x00'}, {}, {&(0x7f0000000280)=@adf_dec={@bank={'Bank', '4', 'InterruptCoalescingTimerNs\x00'}}}}}}}}}, 0x5}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000500)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) (async) r4 = eventfd2(0x0, 0x0) write$eventfd(r4, &(0x7f0000000080), 0x8) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f00000006c0)={0x101}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000640)={{0x9}, 'port1\x00', 0x0, 0x1020, 0x4, 0x8, 0x6, 0x1f, 0xe9, 0x0, 0x4}) (async) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000600)={r3, 0x60000, 0x8, r4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:16 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef6, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2501.996092][T25066] binder: 25062:25066 ioctl 40046205 0 returned -22 18:25:17 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}, {0x3, 0x40}, 0x1, 0x1, 0x2}) 18:25:17 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000140)={{0x0, 0x6}, {0x0, 0x9}, 0xc, 0x4, 0x9}) 18:25:17 executing program 4: setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f00000000c0)="864651088f7c150463f8693315efa78563a3a165418c3c90b2cf8809febf067aa55fc01bbd687f90af63e8b0ab5d147959d0f337b8191fc03056962f6d53351009265d8d9e3f7c0b95fcdc07008df636f282788ab2edf279aed96b3f31f7fbd8fddc33ccf2c1d85b797313671c909c7b97a682c3bd2af233f796dea69c7376860fbb8585bbf26c78ff4b252bd0898bee7c898afa7b05dd8e7695a4675f13834b046a2decf40bdfffa566d673986a02d58a9fb687e667928fd2a84dc2edf746bb97fc06492ee2c6f2b0225b8bbed99c377c5385a73912f094a6aa74fa4637", 0xde) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:17 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000180)={0x8}) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000080)={0x8, r1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x2}) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r4, 0x40096100, &(0x7f0000000640)={{&(0x7f00000005c0)={'Accelerator1\x00', {&(0x7f0000000500)=@adf_str={@normal='NumberDcInstances\x00', {"4dca1b3a9cf4044632cdcfc7776268b2fb19413da1691390279de11337196f25eede2391ec6ccd98641745f4e5529d4f962af002863d1efb3f1e667453c415ce"}, {&(0x7f0000000440)=@adf_hex={@normal='NumberCyInstances\x00', {0x200}}}}}}}, 0x81}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0xa4000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000002c0)={0xc, 0x0}) (async) read$FUSE(r2, &(0x7f0000000740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r2, &(0x7f0000000680)={0x18, 0x0, r8, {0x7}}, 0x18) (async) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r6, 0x3ba0, &(0x7f0000000300)={0x38, 0x6, r7}) ioctl$IOMMU_DESTROY$device(0xffffffffffffffff, 0x3b80, &(0x7f0000000400)={0x8}) (async) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000240)={0x28, 0x5, r5, 0x0, &(0x7f0000000200)="27a7c6d9b74634bb920d14bbca620a14f232fdec06c9c63190f3", 0x1a, 0x3}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0x40046205, 0x0) 18:25:17 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000040)={{&(0x7f0000000480)={'GENERAL\x00', {&(0x7f00000001c0)=@adf_str={@bank={'Bank', '1', 'CoreAffinity\x00'}, {"c452da26223d2820e3d54c302bf5bce229c25d37ef259b2115c359edeaeced53eadc2a5e63d619e7bf01ba40df4f73ea32edf3639253cf6a7cb7cc0086c39695"}, {&(0x7f0000000100)=@adf_dec={@bank={'Bank', '0', 'InterruptCoalescingNumResponses\x00'}, {0xd37}}}}}, {&(0x7f0000000400)={'KERNEL\x00', {&(0x7f0000000340)=@adf_hex={@format={'Cy', '3', 'RingAsymRx\x00'}, {}, {&(0x7f0000000280)=@adf_dec={@bank={'Bank', '4', 'InterruptCoalescingTimerNs\x00'}}}}}}}}}, 0x5}) (async) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000040)={{&(0x7f0000000480)={'GENERAL\x00', {&(0x7f00000001c0)=@adf_str={@bank={'Bank', '1', 'CoreAffinity\x00'}, {"c452da26223d2820e3d54c302bf5bce229c25d37ef259b2115c359edeaeced53eadc2a5e63d619e7bf01ba40df4f73ea32edf3639253cf6a7cb7cc0086c39695"}, {&(0x7f0000000100)=@adf_dec={@bank={'Bank', '0', 'InterruptCoalescingNumResponses\x00'}, {0xd37}}}}}, {&(0x7f0000000400)={'KERNEL\x00', {&(0x7f0000000340)=@adf_hex={@format={'Cy', '3', 'RingAsymRx\x00'}, {}, {&(0x7f0000000280)=@adf_dec={@bank={'Bank', '4', 'InterruptCoalescingTimerNs\x00'}}}}}}}}}, 0x5}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) r4 = eventfd2(0x0, 0x0) write$eventfd(r4, &(0x7f0000000080), 0x8) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f00000006c0)={0x101}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000640)={{0x9}, 'port1\x00', 0x0, 0x1020, 0x4, 0x8, 0x6, 0x1f, 0xe9, 0x0, 0x4}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000640)={{0x9}, 'port1\x00', 0x0, 0x1020, 0x4, 0x8, 0x6, 0x1f, 0xe9, 0x0, 0x4}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000600)={r3, 0x60000, 0x8, r4}) (async) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000600)={r3, 0x60000, 0x8, r4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:17 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000140)={{0x0, 0x6}, {0x0, 0x9}, 0xc, 0x4, 0x9}) 18:25:17 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}, {0x3, 0x40}, 0x1, 0x1, 0x2}) 18:25:17 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000002400), 0x3d67, 0x8600) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000002440)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000022c0)={0x3, 0x0, &(0x7f0000002280)=[0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000002340)={0x5, 0x0, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, r2, r3, 0x0, 0x0, 0x0], 0x7, 0x1000, 0x0, 0xffffffffffffffff}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f00000000c0)=0x2, 0x4) (async) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_BMAP(r5, &(0x7f0000000140)={0x18, 0xffffffffffffffda, 0x0, {0x7}}, 0x18) (async) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) read$FUSE(r7, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000002540)={0x1, 0x6d}, 0x2) (async) write$FUSE_LSEEK(r8, &(0x7f0000002240)={0x18, 0xfffffffffffffff5, r9}, 0x18) (async) write$FUSE_IOCTL(r6, &(0x7f00000001c0)={0x20, 0x0, r9, {0x200, 0x0, 0x92, 0x20}}, 0x20) (async) r12 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r13 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (rerun: 64) read$FUSE(r12, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r13, &(0x7f0000002240)={0x18, 0x0, r14}, 0x18) (async) write$FUSE_ATTR(r12, &(0x7f0000002580)={0x78, 0x0, r9, {0x30000000, 0x5, 0x0, {0x6, 0x0, 0xfffffffffffffffe, 0xffffffffffffff06, 0x6, 0xe, 0x4, 0x8001, 0x4, 0x4000, 0x5, r10, r11, 0x1}}}, 0x78) (async, rerun: 64) write$FUSE_INIT(r6, &(0x7f0000002380)={0x50, 0x0, r14, {0x7, 0x27, 0x401, 0x1850002, 0x2, 0x1, 0x8000, 0x7f}}, 0x50) (async, rerun: 64) r15 = openat$cuse(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0) r16 = getegid() (async) r17 = geteuid() (async) read$FUSE(r13, &(0x7f0000008700)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f000000a740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f000000c780)=ANY=[@ANYBLOB="9002000000000000", @ANYRES64=0x0, @ANYBLOB="01000000000000000000000000000000ff0000000000000000080000000000000004000000000000060000fc00000000000000000000000000000100000000000500000000000000ff0100000000000000010000000000005c0c000005000000050000000000000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03000000030000000000000003000000000000001f000000000000000a000000010001002f6465762f63757365000000000000000600000000000000030000000000000003000000000000000700000000000000080000000101000005000000000000002af2376700000000b100000000000000010000000000000003000000000000000500000000000000a1db000080000000001000000080000006000000", @ANYRES32=0x0, @ANYRES32=r16, @ANYBLOB="03000000ff070000000000000200000000000000040000000000000001000000090000000000000000000000000000000000000000000000000000001575000000000000000000000000000102000000c38f00000500000000000000070000000000000000000000000000000104000000000000020000000000000004000000000000001f00000002000000000100000020000048340000", @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB="04000000000000000000000004000000000000000600000000000000000000000500000004000000000000000000000000000000c0ffffffffffffff090000000000000000020000000000080000000000000000f10000000000000000000000000000800800000000000000917e00000000000001000000000000800200000005000000010000000020000001000000", @ANYRES32=r10, @ANYRES32=r19, @ANYBLOB="04000000dc540000000000000200000000000000200000000000000001000000faffffff2f00000000000000"], 0x290) (async, rerun: 32) write$FUSE_LSEEK(r15, &(0x7f0000002500)={0x18, 0x0, r9, {0xffffffffffffffae}}, 0x18) (rerun: 32) 18:25:17 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000140)={{0x0, 0x6}, {0x0, 0x9}, 0xc, 0x4, 0x9}) 18:25:17 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}, {0x3, 0x40}, 0x1, 0x1, 0x2}) 18:25:17 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7fffffffffffffff, 0x10000) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) [ 2502.778198][T25103] binder: 25093:25103 ioctl 40046205 0 returned -22 [ 2502.816744][T25106] binder: 25105:25106 ioctl 541b 0 returned -22 18:25:17 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000040)=0x2) write$6lowpan_control(r1, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 18:25:17 executing program 4: setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f00000000c0)="864651088f7c150463f8693315efa78563a3a165418c3c90b2cf8809febf067aa55fc01bbd687f90af63e8b0ab5d147959d0f337b8191fc03056962f6d53351009265d8d9e3f7c0b95fcdc07008df636f282788ab2edf279aed96b3f31f7fbd8fddc33ccf2c1d85b797313671c909c7b97a682c3bd2af233f796dea69c7376860fbb8585bbf26c78ff4b252bd0898bee7c898afa7b05dd8e7695a4675f13834b046a2decf40bdfffa566d673986a02d58a9fb687e667928fd2a84dc2edf746bb97fc06492ee2c6f2b0225b8bbed99c377c5385a73912f094a6aa74fa4637", 0xde) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:17 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, &(0x7f0000000000)="b9d7735d6baa6326605769", 0xb, 0x44, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x6, [@bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x3) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "fad809907a7c9109", "605b6c8266019194f3f2253633d2095b", "2129aa17", "dc3c3fc0b5615d51"}, 0x28) ioctl$BINDER_WRITE_READ(r1, 0x541b, 0x0) 18:25:17 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}, {0x3, 0x40}, 0x1, 0x1, 0x2}) 18:25:18 executing program 0: syz_open_dev$vcsu(&(0x7f0000000040), 0x7fffffffffffffff, 0x10000) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7fffffffffffffff, 0x10000) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:18 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0x2a, 0x8) [ 2503.026324][T25118] binder: 25116:25118 ioctl 40046205 0 returned -22 18:25:18 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000040)=0x2) (async) write$6lowpan_control(r1, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) (async) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 2503.142998][T25121] binder: 25120:25121 ioctl 541b 0 returned -22 18:25:18 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}, {0x3, 0x40}, 0x1, 0x1, 0x2}) 18:25:18 executing program 4: setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f00000000c0)="864651088f7c150463f8693315efa78563a3a165418c3c90b2cf8809febf067aa55fc01bbd687f90af63e8b0ab5d147959d0f337b8191fc03056962f6d53351009265d8d9e3f7c0b95fcdc07008df636f282788ab2edf279aed96b3f31f7fbd8fddc33ccf2c1d85b797313671c909c7b97a682c3bd2af233f796dea69c7376860fbb8585bbf26c78ff4b252bd0898bee7c898afa7b05dd8e7695a4675f13834b046a2decf40bdfffa566d673986a02d58a9fb687e667928fd2a84dc2edf746bb97fc06492ee2c6f2b0225b8bbed99c377c5385a73912f094a6aa74fa4637", 0xde) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f00000000c0)="864651088f7c150463f8693315efa78563a3a165418c3c90b2cf8809febf067aa55fc01bbd687f90af63e8b0ab5d147959d0f337b8191fc03056962f6d53351009265d8d9e3f7c0b95fcdc07008df636f282788ab2edf279aed96b3f31f7fbd8fddc33ccf2c1d85b797313671c909c7b97a682c3bd2af233f796dea69c7376860fbb8585bbf26c78ff4b252bd0898bee7c898afa7b05dd8e7695a4675f13834b046a2decf40bdfffa566d673986a02d58a9fb687e667928fd2a84dc2edf746bb97fc06492ee2c6f2b0225b8bbed99c377c5385a73912f094a6aa74fa4637", 0xde) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 18:25:18 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, &(0x7f0000000000)="b9d7735d6baa6326605769", 0xb, 0x44, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x6, [@bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x3) (async) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "fad809907a7c9109", "605b6c8266019194f3f2253633d2095b", "2129aa17", "dc3c3fc0b5615d51"}, 0x28) (async) ioctl$BINDER_WRITE_READ(r1, 0x541b, 0x0) 18:25:18 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7fffffffffffffff, 0x10000) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) syz_open_dev$vcsu(&(0x7f0000000040), 0x7fffffffffffffff, 0x10000) (async) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) 18:25:18 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000040)=0x2) write$6lowpan_control(r1, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) (async) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 2503.283843][T25133] binder: 25130:25133 unknown command 0 [ 2503.295441][T25133] binder: 25130:25133 ioctl c0306201 20000000 returned -22 18:25:18 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) (async) write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0x2a, 0x8) 18:25:18 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}, {0x3, 0x40}, 0x1, 0x1, 0x2}) 18:25:18 executing program 4: syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000000)=0xcd) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2503.413961][T25142] binder: 25136:25142 ioctl 541b 0 returned -22 18:25:18 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, &(0x7f0000000000)="b9d7735d6baa6326605769", 0xb, 0x44, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x6, [@bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x3) (async) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x3) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "fad809907a7c9109", "605b6c8266019194f3f2253633d2095b", "2129aa17", "dc3c3fc0b5615d51"}, 0x28) (async) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "fad809907a7c9109", "605b6c8266019194f3f2253633d2095b", "2129aa17", "dc3c3fc0b5615d51"}, 0x28) ioctl$BINDER_WRITE_READ(r1, 0x541b, 0x0) [ 2503.468933][T25144] binder: 25141:25144 ioctl 40046205 0 returned -22 18:25:18 executing program 1: syz_open_dev$vcsu(&(0x7f0000000000), 0x7fff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 18:25:18 executing program 0: landlock_create_ruleset(&(0x7f0000000000)={0x862, 0x3}, 0x10, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000000c0)={{0x6, 0x1a}, 'port1\x00', 0xa2, 0xa102c, 0x0, 0xab, 0x16, 0x6, 0x7fffffff, 0x0, 0x2, 0xff}) r1 = landlock_create_ruleset(&(0x7f0000000500)={0x0, 0x1}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000540)={0x1}, 0x0) landlock_restrict_self(r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x0, 0x0) 18:25:18 executing program 4: syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) (async, rerun: 32) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), r0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000000)=0xcd) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2503.606223][T25153] binder: 25149:25153 unknown command 0 [ 2503.611884][T25153] binder: 25149:25153 ioctl c0306201 20000000 returned -22 18:25:18 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}, {0x3, 0x40}, 0x1, 0x1, 0x2}) [ 2503.664643][T25155] binder: 25152:25155 ioctl 541b 0 returned -22 18:25:18 executing program 5: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0xed, 0x0, 0x9}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) 18:25:18 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0x2a, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) (async) write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0x2a, 0x8) (async) [ 2503.724512][T25160] binder: 25157:25160 ioctl 40046205 0 returned -22 18:25:18 executing program 1: syz_open_dev$vcsu(&(0x7f0000000000), 0x7fff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x7fff, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async) 18:25:18 executing program 0: landlock_create_ruleset(&(0x7f0000000000)={0x862, 0x3}, 0x10, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000000c0)={{0x6, 0x1a}, 'port1\x00', 0xa2, 0xa102c, 0x0, 0xab, 0x16, 0x6, 0x7fffffff, 0x0, 0x2, 0xff}) r1 = landlock_create_ruleset(&(0x7f0000000500)={0x0, 0x1}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000540)={0x1}, 0x0) (async) landlock_restrict_self(r1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x0, 0x0) 18:25:18 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) [ 2503.933937][T25173] binder: 25168:25173 ioctl 40046205 0 returned -22 [ 2503.933955][T25172] binder: 25167:25172 unknown command 0 [ 2503.933981][T25172] binder: 25167:25172 ioctl c0306201 20000000 returned -22 [ 2503.960277][T25180] binder: 25168:25180 ioctl 40046205 0 returned -22 [ 2503.960516][T25174] binder: 25169:25174 ioctl 541b 0 returned -22 18:25:19 executing program 0: landlock_create_ruleset(&(0x7f0000000000)={0x862, 0x3}, 0x10, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000006c0)={0x101}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000000c0)={{0x6, 0x1a}, 'port1\x00', 0xa2, 0xa102c, 0x0, 0xab, 0x16, 0x6, 0x7fffffff, 0x0, 0x2, 0xff}) landlock_create_ruleset(&(0x7f0000000500)={0x0, 0x1}, 0x10, 0x0) (async) r1 = landlock_create_ruleset(&(0x7f0000000500)={0x0, 0x1}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000540)={0x1}, 0x0) landlock_restrict_self(r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x0, 0x0) 18:25:19 executing program 1: syz_open_dev$vcsu(&(0x7f0000000000), 0x7fff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 18:25:19 executing program 4: syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000000)=0xcd) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000000)=0xcd) (async) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 18:25:19 executing program 5: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0xed, 0x0, 0x9}) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) 18:25:19 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) [ 2504.020424][T25183] binder: 25167:25183 unknown command 0 [ 2504.054085][T25183] binder: 25167:25183 ioctl c0306201 20000000 returned -22 18:25:19 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000180)={0x1, 0x45cbddcf, 0x0, 'queue0\x00', 0x9}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="06630440020000001286856b66f7b1a0e09872d58c5ef9beaf6d223682ce23c5068754966b2a4cf1737b8c12eefed0b0af581b81cf84cc30f39a909926f95a83a12c51bb147b0154c3c9cdb9e46aa62efc20cce36ae7038701a4d7"], 0x0, 0x0, 0x0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000002c0)={0x9bd9, 0x400, 0x400}) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000100)=""/83, 0x53, 0x2, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast]}, 0x40) 18:25:19 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:19 executing program 5: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0xed, 0x0, 0x9}) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) [ 2504.185420][T25192] binder: 25188:25192 ioctl 541b 0 returned -22 [ 2504.214252][T25195] binder: 25190:25195 ioctl 40046205 0 returned -22 18:25:19 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) 18:25:19 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000740)={0x8}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x933d, 0x40) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xfc, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="852a68730b00000002000000000000000000000000000000852a68730b10000001000000000000000000000000000000852a6277001100000000685e8dc300"/72], &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}, @increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/147, 0x93, 0x0, 0x8}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/157, 0x9d, 0x1, 0x5}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000340)={0x0, 0x28, 0x50}}}, @enter_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@fda={0x66646185, 0x0, 0x2, 0x3f}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/28, 0x1c, 0x2, 0x19}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000440)={0x0, 0x20, 0x48}}}, @decrefs={0x40046307, 0x3}], 0xe5, 0x0, &(0x7f0000000580)="d6f82eb5e73fb5a414f2ad0ebc4e7e653b07ad70047fb0cd6d7ae732f0ea678ab63d569a5495721643d86f1eecc2338923c4a381e4d75f935cee6180e1ecd15bebe4cb7c64bb41c27777451e76fde35cfe73f20789492dca863637ea4e4c951cccd14b2ea7c0364542eb1816317f1530b34b6ff6423f40a07e602444db9d1204fc485284a9d5c746f6cbed0d5c6d2eefd16ba14da919e665f232862b320f983f6f9ffab8ebf8fb4070ef333495024f221ea056e3f6027590faffd35ec8ce649598c23ec48f9ca222be1896a34870c45b2b3787c83f3da831342dcd457c97ef12f2c1a29805"}) r4 = syz_open_dev$vcsu(&(0x7f00000006c0), 0x2, 0x149400) connect$rose(r4, &(0x7f0000000700)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c) 18:25:19 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, 0x0) fanotify_mark(r1, 0x400, 0x4000000a, r2, &(0x7f00000000c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:19 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) 18:25:19 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000180)={0x1, 0x45cbddcf, 0x0, 'queue0\x00', 0x9}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="06630440020000001286856b66f7b1a0e09872d58c5ef9beaf6d223682ce23c5068754966b2a4cf1737b8c12eefed0b0af581b81cf84cc30f39a909926f95a83a12c51bb147b0154c3c9cdb9e46aa62efc20cce36ae7038701a4d7"], 0x0, 0x0, 0x0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000006c0)={0x101}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000002c0)={0x9bd9, 0x400, 0x400}) (async, rerun: 32) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000100)=""/83, 0x53, 0x2, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast]}, 0x40) (rerun: 32) [ 2504.408767][T25202] binder: 25201:25202 ioctl 541b 0 returned -22 18:25:19 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000480)={{}, {0x3, 0x40}, 0x1, 0x1, 0x2}) 18:25:19 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x27, 0x401, 0x1000, 0xff, 0x3, 0x4, 0x6149}}, 0x50) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x541b, 0x0) [ 2504.468717][T25209] binder: 25206:25209 ioctl 40046205 0 returned -22 18:25:19 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, 0x0) fanotify_mark(r1, 0x400, 0x4000000a, r2, &(0x7f00000000c0)='./file0\x00') (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:19 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000740)={0x8}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x933d, 0x40) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xfc, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="852a68730b00000002000000000000000000000000000000852a68730b10000001000000000000000000000000000000852a6277001100000000685e8dc300"/72], &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}, @increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/147, 0x93, 0x0, 0x8}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/157, 0x9d, 0x1, 0x5}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000340)={0x0, 0x28, 0x50}}}, @enter_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@fda={0x66646185, 0x0, 0x2, 0x3f}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/28, 0x1c, 0x2, 0x19}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000440)={0x0, 0x20, 0x48}}}, @decrefs={0x40046307, 0x3}], 0xe5, 0x0, &(0x7f0000000580)="d6f82eb5e73fb5a414f2ad0ebc4e7e653b07ad70047fb0cd6d7ae732f0ea678ab63d569a5495721643d86f1eecc2338923c4a381e4d75f935cee6180e1ecd15bebe4cb7c64bb41c27777451e76fde35cfe73f20789492dca863637ea4e4c951cccd14b2ea7c0364542eb1816317f1530b34b6ff6423f40a07e602444db9d1204fc485284a9d5c746f6cbed0d5c6d2eefd16ba14da919e665f232862b320f983f6f9ffab8ebf8fb4070ef333495024f221ea056e3f6027590faffd35ec8ce649598c23ec48f9ca222be1896a34870c45b2b3787c83f3da831342dcd457c97ef12f2c1a29805"}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xfc, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="852a68730b00000002000000000000000000000000000000852a68730b10000001000000000000000000000000000000852a6277001100000000685e8dc300"/72], &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}, @increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/147, 0x93, 0x0, 0x8}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/157, 0x9d, 0x1, 0x5}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000340)={0x0, 0x28, 0x50}}}, @enter_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@fda={0x66646185, 0x0, 0x2, 0x3f}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/28, 0x1c, 0x2, 0x19}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000440)={0x0, 0x20, 0x48}}}, @decrefs={0x40046307, 0x3}], 0xe5, 0x0, &(0x7f0000000580)="d6f82eb5e73fb5a414f2ad0ebc4e7e653b07ad70047fb0cd6d7ae732f0ea678ab63d569a5495721643d86f1eecc2338923c4a381e4d75f935cee6180e1ecd15bebe4cb7c64bb41c27777451e76fde35cfe73f20789492dca863637ea4e4c951cccd14b2ea7c0364542eb1816317f1530b34b6ff6423f40a07e602444db9d1204fc485284a9d5c746f6cbed0d5c6d2eefd16ba14da919e665f232862b320f983f6f9ffab8ebf8fb4070ef333495024f221ea056e3f6027590faffd35ec8ce649598c23ec48f9ca222be1896a34870c45b2b3787c83f3da831342dcd457c97ef12f2c1a29805"}) syz_open_dev$vcsu(&(0x7f00000006c0), 0x2, 0x149400) (async) r4 = syz_open_dev$vcsu(&(0x7f00000006c0), 0x2, 0x149400) connect$rose(r4, &(0x7f0000000700)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c) 18:25:19 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) [ 2504.619421][T25218] binder: 25214:25218 ioctl 541b 0 returned -22 18:25:19 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000480)={{}, {0x3, 0x40}, 0x1, 0x1, 0x2}) 18:25:19 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x27, 0x401, 0x1000, 0xff, 0x3, 0x4, 0x6149}}, 0x50) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x541b, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0x541b, 0x0) 18:25:19 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000180)={0x1, 0x45cbddcf, 0x0, 'queue0\x00', 0x9}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="06630440020000001286856b66f7b1a0e09872d58c5ef9beaf6d223682ce23c5068754966b2a4cf1737b8c12eefed0b0af581b81cf84cc30f39a909926f95a83a12c51bb147b0154c3c9cdb9e46aa62efc20cce36ae7038701a4d7"], 0x0, 0x0, 0x0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000002c0)={0x9bd9, 0x400, 0x400}) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000100)=""/83, 0x53, 0x2, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast]}, 0x40) (async) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000100)=""/83, 0x53, 0x2, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast]}, 0x40) 18:25:19 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, 0x0) fanotify_mark(r1, 0x400, 0x4000000a, r2, &(0x7f00000000c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2504.726281][T25227] binder: 25224:25227 ioctl 40046205 0 returned -22 [ 2504.751076][T25228] binder: 25224:25228 ioctl 40046205 0 returned -22 18:25:19 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x4040845}, 0x1) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r3, 0xc0603d06, &(0x7f0000000740)) ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, &(0x7f0000000580)={'\x00', 0x5, 0x2, 0x1}) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf4, r4, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6973}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x401}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x2c, r6, 0x207, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb8, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf398}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) r7 = syz_open_dev$vcsu(&(0x7f0000000600), 0x7, 0x40) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r8, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r9, &(0x7f0000002240)={0x18, 0x0, r10}, 0x18) write$FUSE_LSEEK(r7, &(0x7f0000000640)={0x18, 0xfffffffffffffffe, r10, {0x7fffffff}}, 0x18) [ 2504.856106][T25235] binder: 25231:25235 ioctl 541b 0 returned -22 18:25:19 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000180)={0x8}) (async) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000740)={0x8}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x933d, 0x40) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xfc, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="852a68730b00000002000000000000000000000000000000852a68730b10000001000000000000000000000000000000852a6277001100000000685e8dc300"/72], &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}, @increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/147, 0x93, 0x0, 0x8}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/157, 0x9d, 0x1, 0x5}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000340)={0x0, 0x28, 0x50}}}, @enter_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@fda={0x66646185, 0x0, 0x2, 0x3f}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/28, 0x1c, 0x2, 0x19}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000440)={0x0, 0x20, 0x48}}}, @decrefs={0x40046307, 0x3}], 0xe5, 0x0, &(0x7f0000000580)="d6f82eb5e73fb5a414f2ad0ebc4e7e653b07ad70047fb0cd6d7ae732f0ea678ab63d569a5495721643d86f1eecc2338923c4a381e4d75f935cee6180e1ecd15bebe4cb7c64bb41c27777451e76fde35cfe73f20789492dca863637ea4e4c951cccd14b2ea7c0364542eb1816317f1530b34b6ff6423f40a07e602444db9d1204fc485284a9d5c746f6cbed0d5c6d2eefd16ba14da919e665f232862b320f983f6f9ffab8ebf8fb4070ef333495024f221ea056e3f6027590faffd35ec8ce649598c23ec48f9ca222be1896a34870c45b2b3787c83f3da831342dcd457c97ef12f2c1a29805"}) (async) r4 = syz_open_dev$vcsu(&(0x7f00000006c0), 0x2, 0x149400) connect$rose(r4, &(0x7f0000000700)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c) 18:25:19 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000480)={{}, {0x3, 0x40}, 0x1, 0x1, 0x2}) 18:25:19 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000100)) [ 2504.924480][T25240] binder: 25231:25240 ioctl 541b 0 returned -22 18:25:19 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x27, 0x401, 0x1000, 0xff, 0x3, 0x4, 0x6149}}, 0x50) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x541b, 0x0) [ 2504.989226][T25244] binder: 25242:25244 ioctl 40046205 0 returned -22 18:25:20 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x8000000000000001, 0x100) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r5, 0x0, 0x0, 0x1, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r4, &(0x7f0000002240)={0x18, 0x0, r6}, 0x18) write$FUSE_OPEN(r2, &(0x7f00000000c0)={0x20, 0x0, r6, {0x0, 0x1a}}, 0x20) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2505.036205][T25249] binder: 25243:25249 unknown command 134217760 [ 2505.069664][T25249] binder: 25243:25249 ioctl c0306201 20000000 returned -22 18:25:20 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}, {0x0, 0x40}, 0x1, 0x1, 0x2}) 18:25:20 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000040)={{0xb9, 0xa6}, {0xfb, 0xde}, 0x101, 0x2, 0x2}) [ 2505.087989][T25252] binder: 25250:25252 unknown command 0 [ 2505.142876][T25252] binder: 25250:25252 ioctl c0306201 20000000 returned -22 [ 2505.147312][T25254] binder: 25253:25254 ioctl 541b 0 returned -22 18:25:20 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x4040845}, 0x1) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r3, 0xc0603d06, &(0x7f0000000740)) (async) ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, &(0x7f0000000580)={'\x00', 0x5, 0x2, 0x1}) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf4, r4, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6973}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x401}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x2c, r6, 0x207, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x2c}}, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb8, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf398}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) r7 = syz_open_dev$vcsu(&(0x7f0000000600), 0x7, 0x40) (async) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r8, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r9, &(0x7f0000002240)={0x18, 0x0, r10}, 0x18) (async) write$FUSE_LSEEK(r7, &(0x7f0000000640)={0x18, 0xfffffffffffffffe, r10, {0x7fffffff}}, 0x18) 18:25:20 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000100)) 18:25:20 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x8000000000000001, 0x100) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r5, 0x0, 0x0, 0x1, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r4, &(0x7f0000002240)={0x18, 0x0, r6}, 0x18) write$FUSE_OPEN(r2, &(0x7f00000000c0)={0x20, 0x0, r6, {0x0, 0x1a}}, 0x20) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) syz_open_dev$vcsu(&(0x7f0000000040), 0x8000000000000001, 0x100) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) recvfrom$rxrpc(r5, 0x0, 0x0, 0x1, 0x0, 0x0) (async) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) (async) write$FUSE_LSEEK(r4, &(0x7f0000002240)={0x18, 0x0, r6}, 0x18) (async) write$FUSE_OPEN(r2, &(0x7f00000000c0)={0x20, 0x0, r6, {0x0, 0x1a}}, 0x20) (async) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 18:25:20 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000000)=0x2) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 18:25:20 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}, {}, 0x1, 0x1, 0x2}) [ 2505.283795][T25261] binder: 25260:25261 ioctl 40046205 0 returned -22 18:25:20 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000040)={{0xb9, 0xa6}, {0xfb, 0xde}, 0x101, 0x2, 0x2}) [ 2505.335824][T25265] binder: 25262:25265 unknown command 0 [ 2505.353911][T25265] binder: 25262:25265 ioctl c0306201 20000000 returned -22 18:25:20 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000100)) [ 2505.384019][T25267] binder: 25263:25267 unknown command 134217760 [ 2505.409947][T25267] binder: 25263:25267 ioctl c0306201 20000000 returned -22 18:25:20 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, 0x0) (async) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) syz_open_dev$vcsu(&(0x7f0000000040), 0x8000000000000001, 0x100) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x8000000000000001, 0x100) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r5, 0x0, 0x0, 0x1, 0x0, 0x0) (async) recvfrom$rxrpc(r5, 0x0, 0x0, 0x1, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r4, &(0x7f0000002240)={0x18, 0x0, r6}, 0x18) write$FUSE_OPEN(r2, &(0x7f00000000c0)={0x20, 0x0, r6, {0x0, 0x1a}}, 0x20) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2505.493868][T25274] binder: 25273:25274 ioctl 541b 0 returned -22 [ 2505.531308][T25281] binder: 25280:25281 ioctl 40046205 0 returned -22 18:25:20 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000000)=0x2) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000000)=0x2) (async) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) 18:25:20 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}, {}, 0x0, 0x1, 0x2}) 18:25:20 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x4040845}, 0x1) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r3, 0xc0603d06, &(0x7f0000000740)) (async) ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, &(0x7f0000000580)={'\x00', 0x5, 0x2, 0x1}) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf4, r4, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6973}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x401}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x2c, r6, 0x207, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb8, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf398}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) (async) r7 = syz_open_dev$vcsu(&(0x7f0000000600), 0x7, 0x40) (async) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) read$FUSE(r8, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r9, &(0x7f0000002240)={0x18, 0x0, r10}, 0x18) write$FUSE_LSEEK(r7, &(0x7f0000000640)={0x18, 0xfffffffffffffffe, r10, {0x7fffffff}}, 0x18) [ 2505.568733][T25283] binder: 25282:25283 unknown command 0 [ 2505.586138][T25283] binder: 25282:25283 ioctl c0306201 20000000 returned -22 18:25:20 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000040)={{0xb9, 0xa6}, {0xfb, 0xde}, 0x101, 0x2, 0x2}) 18:25:20 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1794218d10d840aace61238ce24fb83d8f4fee87b9b4e7049beb2c07137b313d096a89f20d95bc9b3f36aaa620d2c6078d8a014268be351f0a69e23cb3519f8759"], 0x0, 0x0, 0x0}) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x1}, 0x2) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1000, 0x400) ioctl$SNDCTL_TMR_METRONOME(r1, 0x40045407) [ 2505.736250][T25294] binder: 25289:25294 unknown command 134217760 [ 2505.748011][T25297] binder: 25291:25297 ioctl 40046205 0 returned -22 [ 2505.754249][T25293] binder: 25290:25293 ioctl 541b 0 returned -22 [ 2505.774344][T25300] binder: 25298:25300 unknown command 2367788055 18:25:20 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}, {}, 0x0, 0x0, 0x2}) 18:25:20 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3}}, 0x18) 18:25:20 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x7}) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x7, 0x0, 0x1}) [ 2505.787636][T25300] binder: 25298:25300 ioctl c0306201 20000000 returned -22 [ 2505.801714][T25294] binder: 25289:25294 ioctl c0306201 20000000 returned -22 [ 2505.807066][T25305] binder: 25290:25305 ioctl 541b 0 returned -22 18:25:20 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1794218d10d840aace61238ce24fb83d8f4fee87b9b4e7049beb2c07137b313d096a89f20d95bc9b3f36aaa620d2c6078d8a014268be351f0a69e23cb3519f8759"], 0x0, 0x0, 0x0}) (async) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x1}, 0x2) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1000, 0x400) ioctl$SNDCTL_TMR_METRONOME(r1, 0x40045407) 18:25:20 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0}) 18:25:20 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000000)=0x2) (async) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 18:25:20 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}}) [ 2505.990920][T25313] binder: 25309:25313 ioctl 40046205 0 returned -22 [ 2506.034067][T25315] binder: 25311:25315 unknown command 2367788055 [ 2506.056363][T25317] binder: 25314:25317 unknown command 808482864 [ 2506.073766][T25315] binder: 25311:25315 ioctl c0306201 20000000 returned -22 18:25:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async, rerun: 32) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x7}) (async) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x7, 0x0, 0x1}) 18:25:21 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3}}, 0x18) [ 2506.084478][T25317] binder: 25314:25317 ioctl c0306201 20000040 returned -22 18:25:21 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1794218d10d840aace61238ce24fb83d8f4fee87b9b4e7049beb2c07137b313d096a89f20d95bc9b3f36aaa620d2c6078d8a014268be351f0a69e23cb3519f8759"], 0x0, 0x0, 0x0}) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x1}, 0x2) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1000, 0x400) ioctl$SNDCTL_TMR_METRONOME(r1, 0x40045407) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1794218d10d840aace61238ce24fb83d8f4fee87b9b4e7049beb2c07137b313d096a89f20d95bc9b3f36aaa620d2c6078d8a014268be351f0a69e23cb3519f8759"], 0x0, 0x0, 0x0}) (async) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x1}, 0x2) (async) syz_open_dev$vcsu(&(0x7f0000000040), 0x1000, 0x400) (async) ioctl$SNDCTL_TMR_METRONOME(r1, 0x40045407) (async) 18:25:21 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0}) [ 2506.153036][T25324] binder: 25321:25324 ioctl 541b 0 returned -22 18:25:21 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3}}, 0x18) 18:25:21 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) [ 2506.287492][T25332] binder: 25329:25332 unknown command 2367788055 [ 2506.294364][T25330] binder: 25328:25330 ioctl 40046205 0 returned -22 [ 2506.308855][T25332] binder: 25329:25332 ioctl c0306201 20000000 returned -22 [ 2506.344497][T25336] binder: 25333:25336 unknown command 808482864 [ 2506.357988][T25337] binder: 25329:25337 unknown command 2367788055 [ 2506.373320][T25336] binder: 25333:25336 ioctl c0306201 20000040 returned -22 [ 2506.383984][T25341] binder: 25340:25341 ioctl 541b 0 returned -22 18:25:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x7}) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x7, 0x0, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x7}) (async) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x7, 0x0, 0x1}) (async) 18:25:21 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3}}, 0x18) [ 2506.400012][T25337] binder: 25329:25337 ioctl c0306201 20000000 returned -22 [ 2506.412322][T25338] binder: 25335:25338 ioctl 40046205 0 returned -22 18:25:21 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0}) 18:25:21 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 18:25:21 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000140)={'\x00', 0x0, 0x2, 0x10000}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0663044000001d008edc846f810e1d214d869f1ff6a8011f3bf9edb52553491f0416ae7a7d616dacafa3"], 0x0, 0x0, 0x0}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000740)) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f00000000c0)={0x83, 0xe5a89bde4688bd54}) r2 = landlock_create_ruleset(&(0x7f0000000500)={0x0, 0x1}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000540)={0x1}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000040)={0x1, 0x6}, 0x0) [ 2506.564885][T25349] binder: 25346:25349 ioctl 40046205 0 returned -22 18:25:21 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x8000000000000001, 0x100) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r5, 0x0, 0x0, 0x1, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r4, &(0x7f0000002240)={0x18, 0x0, r6}, 0x18) write$FUSE_OPEN(r2, &(0x7f00000000c0)={0x20, 0x0, r6, {0x0, 0x1a}}, 0x20) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:21 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x1000008, 0x4000010, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) [ 2506.606280][T25353] binder: 25347:25353 ioctl 541b 0 returned -22 [ 2506.634321][T25355] binder: 25352:25355 unknown command 808482864 18:25:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x110, 0x0, &(0x7f0000000580)=[@dead_binder_done, @register_looper, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x7, 0x2, 0x2a}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/5, 0x5, 0x1, 0x26}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000002c0)={0x0, 0x20, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/93, 0x5d, 0x81, 0x29}, @flat=@weak_binder={0x77622a85, 0x10b}}, &(0x7f0000000400)={0x0, 0x18, 0x40}}}, @increfs, @decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/108, 0x6c, 0x0, 0xf}, @flat=@binder={0x73622a85, 0x10b, 0x2}, @fda={0x66646185, 0x3, 0x1, 0x27}}, &(0x7f0000000540)={0x0, 0x28, 0x40}}, 0x400}], 0xae, 0x0, &(0x7f0000000800)="51eadac1c7db864e165febc050126c44e2351f17604d665cb9daa34bbf55b2e64844e132b7b9411206e1358638aee5dd64df7a1d94dedc509f47f13087ffc8c692a5cb6787f5922a23f92224305d4bf5bb701b1d38b7967efb02181435ca8c1553f63c06b0502d6d60e76e59c4f85ce977a98b8d8e497cd3d531748d6bbe0df3df1d6a6cf845db01dbd10497edde66d4bbfa7a1203a0919961a1b180d0cc043dbae1bcd03bf0a39b3cd74c0b858f"}) r2 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) sendto$isdn(r1, &(0x7f00000000c0)={0x2, 0x1d0, "2b569ac446372544819c474c4a9d4a2d1daea47e75183785589993abfa18828dc40e32136ce2790b24ea80c2f3e985ba274fbb7c740a85f4ab25fae5fb3f05371e355a62d3fade6bcb387407dab95266f1e43ff2a1d1a4c66db6118731fcc5cb033a4a424d0011760e1f2627c6b682147b9aa358762b7217990965b6644bcd825f3b0f1fa21cf9221d801e9328920d71ed5470301838d9652387bf3174be2c6e1affb3c12d83fbe35508c3e0b4bf1218fd553b0028c5447245"}, 0xc1, 0x1, &(0x7f0000000040)={0x22, 0x49, 0xc5, 0x4, 0x40}, 0x6) 18:25:21 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) [ 2506.687543][T25355] binder: 25352:25355 ioctl c0306201 20000040 returned -22 18:25:21 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:21 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000140)={'\x00', 0x0, 0x2, 0x10000}) (async) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000140)={'\x00', 0x0, 0x2, 0x10000}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0663044000001d008edc846f810e1d214d869f1ff6a8011f3bf9edb52553491f0416ae7a7d616dacafa3"], 0x0, 0x0, 0x0}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000740)) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f00000000c0)={0x83, 0xe5a89bde4688bd54}) r2 = landlock_create_ruleset(&(0x7f0000000500)={0x0, 0x1}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000540)={0x1}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000540)={0x1}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000040)={0x1, 0x6}, 0x0) 18:25:21 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000480)={{}, {0x3, 0x40}, 0x1, 0x1, 0x2}) 18:25:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async, rerun: 32) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) (rerun: 32) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x110, 0x0, &(0x7f0000000580)=[@dead_binder_done, @register_looper, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x7, 0x2, 0x2a}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/5, 0x5, 0x1, 0x26}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000002c0)={0x0, 0x20, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/93, 0x5d, 0x81, 0x29}, @flat=@weak_binder={0x77622a85, 0x10b}}, &(0x7f0000000400)={0x0, 0x18, 0x40}}}, @increfs, @decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/108, 0x6c, 0x0, 0xf}, @flat=@binder={0x73622a85, 0x10b, 0x2}, @fda={0x66646185, 0x3, 0x1, 0x27}}, &(0x7f0000000540)={0x0, 0x28, 0x40}}, 0x400}], 0xae, 0x0, &(0x7f0000000800)="51eadac1c7db864e165febc050126c44e2351f17604d665cb9daa34bbf55b2e64844e132b7b9411206e1358638aee5dd64df7a1d94dedc509f47f13087ffc8c692a5cb6787f5922a23f92224305d4bf5bb701b1d38b7967efb02181435ca8c1553f63c06b0502d6d60e76e59c4f85ce977a98b8d8e497cd3d531748d6bbe0df3df1d6a6cf845db01dbd10497edde66d4bbfa7a1203a0919961a1b180d0cc043dbae1bcd03bf0a39b3cd74c0b858f"}) (async) r2 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) sendto$isdn(r1, &(0x7f00000000c0)={0x2, 0x1d0, "2b569ac446372544819c474c4a9d4a2d1daea47e75183785589993abfa18828dc40e32136ce2790b24ea80c2f3e985ba274fbb7c740a85f4ab25fae5fb3f05371e355a62d3fade6bcb387407dab95266f1e43ff2a1d1a4c66db6118731fcc5cb033a4a424d0011760e1f2627c6b682147b9aa358762b7217990965b6644bcd825f3b0f1fa21cf9221d801e9328920d71ed5470301838d9652387bf3174be2c6e1affb3c12d83fbe35508c3e0b4bf1218fd553b0028c5447245"}, 0xc1, 0x1, &(0x7f0000000040)={0x22, 0x49, 0xc5, 0x4, 0x40}, 0x6) [ 2506.842656][T25362] binder: 25361:25362 ioctl 541b 0 returned -22 [ 2506.864899][T25365] binder: 25360:25365 ioctl 40046205 0 returned -22 18:25:21 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x1000008, 0x4000010, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) 18:25:21 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:22 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x110, 0x0, &(0x7f0000000580)=[@dead_binder_done, @register_looper, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x7, 0x2, 0x2a}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/5, 0x5, 0x1, 0x26}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000002c0)={0x0, 0x20, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/93, 0x5d, 0x81, 0x29}, @flat=@weak_binder={0x77622a85, 0x10b}}, &(0x7f0000000400)={0x0, 0x18, 0x40}}}, @increfs, @decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/108, 0x6c, 0x0, 0xf}, @flat=@binder={0x73622a85, 0x10b, 0x2}, @fda={0x66646185, 0x3, 0x1, 0x27}}, &(0x7f0000000540)={0x0, 0x28, 0x40}}, 0x400}], 0xae, 0x0, &(0x7f0000000800)="51eadac1c7db864e165febc050126c44e2351f17604d665cb9daa34bbf55b2e64844e132b7b9411206e1358638aee5dd64df7a1d94dedc509f47f13087ffc8c692a5cb6787f5922a23f92224305d4bf5bb701b1d38b7967efb02181435ca8c1553f63c06b0502d6d60e76e59c4f85ce977a98b8d8e497cd3d531748d6bbe0df3df1d6a6cf845db01dbd10497edde66d4bbfa7a1203a0919961a1b180d0cc043dbae1bcd03bf0a39b3cd74c0b858f"}) r2 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) sendto$isdn(r1, &(0x7f00000000c0)={0x2, 0x1d0, "2b569ac446372544819c474c4a9d4a2d1daea47e75183785589993abfa18828dc40e32136ce2790b24ea80c2f3e985ba274fbb7c740a85f4ab25fae5fb3f05371e355a62d3fade6bcb387407dab95266f1e43ff2a1d1a4c66db6118731fcc5cb033a4a424d0011760e1f2627c6b682147b9aa358762b7217990965b6644bcd825f3b0f1fa21cf9221d801e9328920d71ed5470301838d9652387bf3174be2c6e1affb3c12d83fbe35508c3e0b4bf1218fd553b0028c5447245"}, 0xc1, 0x1, &(0x7f0000000040)={0x22, 0x49, 0xc5, 0x4, 0x40}, 0x6) 18:25:22 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r2, &(0x7f0000002240)={0x18, 0x0, r3}, 0x18) write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10}, 0x10) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r5, &(0x7f0000002240)={0x18, 0x0, r6}, 0x18) write$FUSE_IOCTL(r2, &(0x7f0000000040)={0x20, 0xffffffffffffffda, r6, {0x2, 0x4, 0x0, 0x10000}}, 0x20) 18:25:22 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000140)={'\x00', 0x0, 0x2, 0x10000}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0663044000001d008edc846f810e1d214d869f1ff6a8011f3bf9edb52553491f0416ae7a7d616dacafa3"], 0x0, 0x0, 0x0}) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000740)) (async) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f00000000c0)={0x83, 0xe5a89bde4688bd54}) (async) r2 = landlock_create_ruleset(&(0x7f0000000500)={0x0, 0x1}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000540)={0x1}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000040)={0x1, 0x6}, 0x0) [ 2507.132901][T25382] binder: 25378:25382 ioctl 40046205 0 returned -22 18:25:22 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) 18:25:22 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x1000008, 0x4000010, r0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) 18:25:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x110, 0x0, &(0x7f0000000580)=[@dead_binder_done, @register_looper, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x7, 0x2, 0x2a}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/5, 0x5, 0x1, 0x26}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000002c0)={0x0, 0x20, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/93, 0x5d, 0x81, 0x29}, @flat=@weak_binder={0x77622a85, 0x10b}}, &(0x7f0000000400)={0x0, 0x18, 0x40}}}, @increfs, @decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/108, 0x6c, 0x0, 0xf}, @flat=@binder={0x73622a85, 0x10b, 0x2}, @fda={0x66646185, 0x3, 0x1, 0x27}}, &(0x7f0000000540)={0x0, 0x28, 0x40}}, 0x400}], 0xae, 0x0, &(0x7f0000000800)="51eadac1c7db864e165febc050126c44e2351f17604d665cb9daa34bbf55b2e64844e132b7b9411206e1358638aee5dd64df7a1d94dedc509f47f13087ffc8c692a5cb6787f5922a23f92224305d4bf5bb701b1d38b7967efb02181435ca8c1553f63c06b0502d6d60e76e59c4f85ce977a98b8d8e497cd3d531748d6bbe0df3df1d6a6cf845db01dbd10497edde66d4bbfa7a1203a0919961a1b180d0cc043dbae1bcd03bf0a39b3cd74c0b858f"}) (async, rerun: 32) r2 = socket$caif_stream(0x25, 0x1, 0x3) (rerun: 32) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) (async) sendto$isdn(r1, &(0x7f00000000c0)={0x2, 0x1d0, "2b569ac446372544819c474c4a9d4a2d1daea47e75183785589993abfa18828dc40e32136ce2790b24ea80c2f3e985ba274fbb7c740a85f4ab25fae5fb3f05371e355a62d3fade6bcb387407dab95266f1e43ff2a1d1a4c66db6118731fcc5cb033a4a424d0011760e1f2627c6b682147b9aa358762b7217990965b6644bcd825f3b0f1fa21cf9221d801e9328920d71ed5470301838d9652387bf3174be2c6e1affb3c12d83fbe35508c3e0b4bf1218fd553b0028c5447245"}, 0xc1, 0x1, &(0x7f0000000040)={0x22, 0x49, 0xc5, 0x4, 0x40}, 0x6) 18:25:22 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x110, 0x0, &(0x7f0000000580)=[@dead_binder_done, @register_looper, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x7, 0x2, 0x2a}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/5, 0x5, 0x1, 0x26}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000002c0)={0x0, 0x20, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/93, 0x5d, 0x81, 0x29}, @flat=@weak_binder={0x77622a85, 0x10b}}, &(0x7f0000000400)={0x0, 0x18, 0x40}}}, @increfs, @decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/108, 0x6c, 0x0, 0xf}, @flat=@binder={0x73622a85, 0x10b, 0x2}, @fda={0x66646185, 0x3, 0x1, 0x27}}, &(0x7f0000000540)={0x0, 0x28, 0x40}}, 0x400}], 0xae, 0x0, &(0x7f0000000800)="51eadac1c7db864e165febc050126c44e2351f17604d665cb9daa34bbf55b2e64844e132b7b9411206e1358638aee5dd64df7a1d94dedc509f47f13087ffc8c692a5cb6787f5922a23f92224305d4bf5bb701b1d38b7967efb02181435ca8c1553f63c06b0502d6d60e76e59c4f85ce977a98b8d8e497cd3d531748d6bbe0df3df1d6a6cf845db01dbd10497edde66d4bbfa7a1203a0919961a1b180d0cc043dbae1bcd03bf0a39b3cd74c0b858f"}) r2 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) sendto$isdn(r1, &(0x7f00000000c0)={0x2, 0x1d0, "2b569ac446372544819c474c4a9d4a2d1daea47e75183785589993abfa18828dc40e32136ce2790b24ea80c2f3e985ba274fbb7c740a85f4ab25fae5fb3f05371e355a62d3fade6bcb387407dab95266f1e43ff2a1d1a4c66db6118731fcc5cb033a4a424d0011760e1f2627c6b682147b9aa358762b7217990965b6644bcd825f3b0f1fa21cf9221d801e9328920d71ed5470301838d9652387bf3174be2c6e1affb3c12d83fbe35508c3e0b4bf1218fd553b0028c5447245"}, 0xc1, 0x1, &(0x7f0000000040)={0x22, 0x49, 0xc5, 0x4, 0x40}, 0x6) [ 2507.264361][T25388] binder: 25387:25388 ioctl 541b 0 returned -22 18:25:22 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async, rerun: 64) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) (async, rerun: 64) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r2, &(0x7f0000002240)={0x18, 0x0, r3}, 0x18) (async) write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10}, 0x10) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r5, &(0x7f0000002240)={0x18, 0x0, r6}, 0x18) (async) write$FUSE_IOCTL(r2, &(0x7f0000000040)={0x20, 0xffffffffffffffda, r6, {0x2, 0x4, 0x0, 0x10000}}, 0x20) 18:25:22 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) [ 2507.406250][T25395] binder: 25393:25395 ioctl 40046205 0 returned -22 18:25:22 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000100)={0x3ff, 0x0, 'client1\x00', 0x2, "182e67bc412196be", "adc6d5d2c54213a98a78775fe68a98d1c4d7c0eb10dc9eed0adc5c8131f30a37", 0x5b0, 0xff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:22 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x110, 0x0, &(0x7f0000000580)=[@dead_binder_done, @register_looper, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x7, 0x2, 0x2a}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/5, 0x5, 0x1, 0x26}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000002c0)={0x0, 0x20, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/93, 0x5d, 0x81, 0x29}, @flat=@weak_binder={0x77622a85, 0x10b}}, &(0x7f0000000400)={0x0, 0x18, 0x40}}}, @increfs, @decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/108, 0x6c, 0x0, 0xf}, @flat=@binder={0x73622a85, 0x10b, 0x2}, @fda={0x66646185, 0x3, 0x1, 0x27}}, &(0x7f0000000540)={0x0, 0x28, 0x40}}, 0x400}], 0xae, 0x0, &(0x7f0000000800)="51eadac1c7db864e165febc050126c44e2351f17604d665cb9daa34bbf55b2e64844e132b7b9411206e1358638aee5dd64df7a1d94dedc509f47f13087ffc8c692a5cb6787f5922a23f92224305d4bf5bb701b1d38b7967efb02181435ca8c1553f63c06b0502d6d60e76e59c4f85ce977a98b8d8e497cd3d531748d6bbe0df3df1d6a6cf845db01dbd10497edde66d4bbfa7a1203a0919961a1b180d0cc043dbae1bcd03bf0a39b3cd74c0b858f"}) r2 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) sendto$isdn(r1, &(0x7f00000000c0)={0x2, 0x1d0, "2b569ac446372544819c474c4a9d4a2d1daea47e75183785589993abfa18828dc40e32136ce2790b24ea80c2f3e985ba274fbb7c740a85f4ab25fae5fb3f05371e355a62d3fade6bcb387407dab95266f1e43ff2a1d1a4c66db6118731fcc5cb033a4a424d0011760e1f2627c6b682147b9aa358762b7217990965b6644bcd825f3b0f1fa21cf9221d801e9328920d71ed5470301838d9652387bf3174be2c6e1affb3c12d83fbe35508c3e0b4bf1218fd553b0028c5447245"}, 0xc1, 0x1, &(0x7f0000000040)={0x22, 0x49, 0xc5, 0x4, 0x40}, 0x6) [ 2507.476418][T25406] binder: 25405:25406 ioctl 541b 0 returned -22 18:25:22 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0xff, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000000c0)={0x2a04, r2}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x5, 0x200) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f0000000140)={0x18, 0x0, 0x1, 0x0, 0x0, 0x1}) 18:25:22 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000100)) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:22 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r2, &(0x7f0000002240)={0x18, 0x0, r3}, 0x18) (async) write$FUSE_LSEEK(r2, &(0x7f0000002240)={0x18, 0x0, r3}, 0x18) write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10}, 0x10) (async) write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10}, 0x10) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r5, &(0x7f0000002240)={0x18, 0x0, r6}, 0x18) write$FUSE_IOCTL(r2, &(0x7f0000000040)={0x20, 0xffffffffffffffda, r6, {0x2, 0x4, 0x0, 0x10000}}, 0x20) (async) write$FUSE_IOCTL(r2, &(0x7f0000000040)={0x20, 0xffffffffffffffda, r6, {0x2, 0x4, 0x0, 0x10000}}, 0x20) 18:25:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:22 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x110, 0x0, &(0x7f0000000580)=[@dead_binder_done, @register_looper, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x7, 0x2, 0x2a}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/5, 0x5, 0x1, 0x26}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000002c0)={0x0, 0x20, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/93, 0x5d, 0x81, 0x29}, @flat=@weak_binder={0x77622a85, 0x10b}}, &(0x7f0000000400)={0x0, 0x18, 0x40}}}, @increfs, @decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/108, 0x6c, 0x0, 0xf}, @flat=@binder={0x73622a85, 0x10b, 0x2}, @fda={0x66646185, 0x3, 0x1, 0x27}}, &(0x7f0000000540)={0x0, 0x28, 0x40}}, 0x400}], 0xae, 0x0, &(0x7f0000000800)="51eadac1c7db864e165febc050126c44e2351f17604d665cb9daa34bbf55b2e64844e132b7b9411206e1358638aee5dd64df7a1d94dedc509f47f13087ffc8c692a5cb6787f5922a23f92224305d4bf5bb701b1d38b7967efb02181435ca8c1553f63c06b0502d6d60e76e59c4f85ce977a98b8d8e497cd3d531748d6bbe0df3df1d6a6cf845db01dbd10497edde66d4bbfa7a1203a0919961a1b180d0cc043dbae1bcd03bf0a39b3cd74c0b858f"}) r2 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) 18:25:22 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000006c0)={0x101}) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000100)={0x3ff, 0x0, 'client1\x00', 0x2, "182e67bc412196be", "adc6d5d2c54213a98a78775fe68a98d1c4d7c0eb10dc9eed0adc5c8131f30a37", 0x5b0, 0xff}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) [ 2507.689771][T25417] binder: 25416:25417 ioctl 40046205 0 returned -22 18:25:22 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0xff, 0x0) (async) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000000c0)={0x2a04, r2}, 0x0) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x5, 0x200) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f0000000140)={0x18, 0x0, 0x1, 0x0, 0x0, 0x1}) 18:25:22 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) (rerun: 64) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000100)) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) [ 2507.795315][T25420] binder: 25418:25420 ioctl 541b 0 returned -22 18:25:22 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x110, 0x0, &(0x7f0000000580)=[@dead_binder_done, @register_looper, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x7, 0x2, 0x2a}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/5, 0x5, 0x1, 0x26}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000002c0)={0x0, 0x20, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/93, 0x5d, 0x81, 0x29}, @flat=@weak_binder={0x77622a85, 0x10b}}, &(0x7f0000000400)={0x0, 0x18, 0x40}}}, @increfs, @decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/108, 0x6c, 0x0, 0xf}, @flat=@binder={0x73622a85, 0x10b, 0x2}, @fda={0x66646185, 0x3, 0x1, 0x27}}, &(0x7f0000000540)={0x0, 0x28, 0x40}}, 0x400}], 0xae, 0x0, &(0x7f0000000800)="51eadac1c7db864e165febc050126c44e2351f17604d665cb9daa34bbf55b2e64844e132b7b9411206e1358638aee5dd64df7a1d94dedc509f47f13087ffc8c692a5cb6787f5922a23f92224305d4bf5bb701b1d38b7967efb02181435ca8c1553f63c06b0502d6d60e76e59c4f85ce977a98b8d8e497cd3d531748d6bbe0df3df1d6a6cf845db01dbd10497edde66d4bbfa7a1203a0919961a1b180d0cc043dbae1bcd03bf0a39b3cd74c0b858f"}) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) 18:25:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 18:25:22 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000100)={0x3ff, 0x0, 'client1\x00', 0x2, "182e67bc412196be", "adc6d5d2c54213a98a78775fe68a98d1c4d7c0eb10dc9eed0adc5c8131f30a37", 0x5b0, 0xff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) [ 2507.997558][T25438] binder: 25434:25438 ioctl 40046205 0 returned -22 18:25:23 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x110, 0x0, &(0x7f0000000580)=[@dead_binder_done, @register_looper, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x7, 0x2, 0x2a}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/5, 0x5, 0x1, 0x26}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000002c0)={0x0, 0x20, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/93, 0x5d, 0x81, 0x29}, @flat=@weak_binder={0x77622a85, 0x10b}}, &(0x7f0000000400)={0x0, 0x18, 0x40}}}, @increfs, @decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/108, 0x6c, 0x0, 0xf}, @flat=@binder={0x73622a85, 0x10b, 0x2}, @fda={0x66646185, 0x3, 0x1, 0x27}}, &(0x7f0000000540)={0x0, 0x28, 0x40}}, 0x400}], 0xae, 0x0, &(0x7f0000000800)="51eadac1c7db864e165febc050126c44e2351f17604d665cb9daa34bbf55b2e64844e132b7b9411206e1358638aee5dd64df7a1d94dedc509f47f13087ffc8c692a5cb6787f5922a23f92224305d4bf5bb701b1d38b7967efb02181435ca8c1553f63c06b0502d6d60e76e59c4f85ce977a98b8d8e497cd3d531748d6bbe0df3df1d6a6cf845db01dbd10497edde66d4bbfa7a1203a0919961a1b180d0cc043dbae1bcd03bf0a39b3cd74c0b858f"}) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) 18:25:23 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:23 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0xff, 0x0) (async) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000000c0)={0x2a04, r2}, 0x0) (async, rerun: 32) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x5, 0x200) (rerun: 32) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f0000000140)={0x18, 0x0, 0x1, 0x0, 0x0, 0x1}) [ 2508.258112][T25455] binder: 25454:25455 ioctl 40046205 0 returned -22 18:25:23 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x0, 0x7f}, {0x9e, 0x31}, 0xdb5, 0x4, 0x5}) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) 18:25:23 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @default}, 0x1c) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "1d26b0221bf12a40", "ae7589b81e9701b2bd02f3bcd8e3b69d2f23fcb89d97a30ed4743da1ca4b96e2", "c9c75da0", "1f863f04cc9b9d2c"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) 18:25:23 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x110, 0x0, &(0x7f0000000580)=[@dead_binder_done, @register_looper, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x7, 0x2, 0x2a}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/5, 0x5, 0x1, 0x26}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000002c0)={0x0, 0x20, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/93, 0x5d, 0x81, 0x29}, @flat=@weak_binder={0x77622a85, 0x10b}}, &(0x7f0000000400)={0x0, 0x18, 0x40}}}, @increfs, @decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/108, 0x6c, 0x0, 0xf}, @flat=@binder={0x73622a85, 0x10b, 0x2}, @fda={0x66646185, 0x3, 0x1, 0x27}}, &(0x7f0000000540)={0x0, 0x28, 0x40}}, 0x400}], 0xae, 0x0, &(0x7f0000000800)="51eadac1c7db864e165febc050126c44e2351f17604d665cb9daa34bbf55b2e64844e132b7b9411206e1358638aee5dd64df7a1d94dedc509f47f13087ffc8c692a5cb6787f5922a23f92224305d4bf5bb701b1d38b7967efb02181435ca8c1553f63c06b0502d6d60e76e59c4f85ce977a98b8d8e497cd3d531748d6bbe0df3df1d6a6cf845db01dbd10497edde66d4bbfa7a1203a0919961a1b180d0cc043dbae1bcd03bf0a39b3cd74c0b858f"}) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) 18:25:23 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xa1}, 0x2) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:23 executing program 0: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xdc, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @fda={0x66646185, 0x9, 0x1, 0x26}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xa, 0x1, 0xc}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x8, 0x0, 0x21}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/171, 0xab, 0x2, 0x2a}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000003c0)={0x0, 0x20, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 18:25:23 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000000)={0x2, 0x8, 0x2, 0x80, 0x4, 0x7fffffff}) 18:25:23 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @default}, 0x1c) (rerun: 64) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "1d26b0221bf12a40", "ae7589b81e9701b2bd02f3bcd8e3b69d2f23fcb89d97a30ed4743da1ca4b96e2", "c9c75da0", "1f863f04cc9b9d2c"}, 0x38) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) 18:25:23 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xa1}, 0x2) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xa1}, 0x2) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:23 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) [ 2508.705242][T25468] binder: 25465:25468 ioctl 40046205 0 returned -22 18:25:23 executing program 0: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xdc, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @fda={0x66646185, 0x9, 0x1, 0x26}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xa, 0x1, 0xc}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x8, 0x0, 0x21}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/171, 0xab, 0x2, 0x2a}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000003c0)={0x0, 0x20, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xdc, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @fda={0x66646185, 0x9, 0x1, 0x26}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xa, 0x1, 0xc}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x8, 0x0, 0x21}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/171, 0xab, 0x2, 0x2a}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000003c0)={0x0, 0x20, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) (async) 18:25:23 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000000)={0x2, 0x8, 0x2, 0x80, 0x4, 0x7fffffff}) [ 2508.802531][T25470] binder: 25469:25470 ioctl 541b 0 returned -22 18:25:23 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x0, 0x7f}, {0x9e, 0x31}, 0xdb5, 0x4, 0x5}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x0, 0x7f}, {0x9e, 0x31}, 0xdb5, 0x4, 0x5}) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) 18:25:23 executing program 0: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xdc, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @fda={0x66646185, 0x9, 0x1, 0x26}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xa, 0x1, 0xc}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x8, 0x0, 0x21}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/171, 0xab, 0x2, 0x2a}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000003c0)={0x0, 0x20, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 18:25:23 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) [ 2508.954551][T25483] binder: 25479:25483 ioctl 40046205 0 returned -22 18:25:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xa1}, 0x2) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xa1}, 0x2) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 18:25:24 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000000)={0x2, 0x8, 0x2, 0x80, 0x4, 0x7fffffff}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x800) (async) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000000)={0x2, 0x8, 0x2, 0x80, 0x4, 0x7fffffff}) (async) 18:25:24 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) 18:25:24 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @default}, 0x1c) (async) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "1d26b0221bf12a40", "ae7589b81e9701b2bd02f3bcd8e3b69d2f23fcb89d97a30ed4743da1ca4b96e2", "c9c75da0", "1f863f04cc9b9d2c"}, 0x38) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) (rerun: 32) [ 2509.085295][T25492] binder: 25486:25492 ioctl 541b 0 returned -22 18:25:24 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) 18:25:24 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x0, 0x7f}, {0x9e, 0x31}, 0xdb5, 0x4, 0x5}) (async) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) 18:25:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2509.190129][T25500] binder: 25499:25500 ioctl 40046205 0 returned -22 [ 2509.246043][T25503] binder: 25499:25503 ioctl 40046205 0 returned -22 18:25:24 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe0, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4008800}, 0x24004000) 18:25:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18, 0x10000, 0x9, 0x37f, 0x80, 0xffffffffffffffff, 0xdf, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="adb4679043f558e707ed843836c71b23d48a06f60ea311d79455e563e21ac1138f92bb5deadc3a0fdba181ca85f04143b5ffae90d2ff9951ef171386d6bec5af1ab07c35ec3ebe93bfad1276084600000000000000092e6f87699bc1dc2bbfa069535d5c999d54ecc9fc511ac6161db127c672f567aaffd2dbbd1ca939"], 0x0, 0x0, 0x0}) 18:25:24 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) 18:25:24 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) [ 2509.314768][T25511] binder: 25509:25511 ioctl 541b 0 returned -22 18:25:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:24 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x0, 0xffffffffffffffff}) write$FUSE_LSEEK(r1, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) 18:25:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18, 0x10000, 0x9, 0x37f, 0x80, 0xffffffffffffffff, 0xdf, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="adb4679043f558e707ed843836c71b23d48a06f60ea311d79455e563e21ac1138f92bb5deadc3a0fdba181ca85f04143b5ffae90d2ff9951ef171386d6bec5af1ab07c35ec3ebe93bfad1276084600000000000000092e6f87699bc1dc2bbfa069535d5c999d54ecc9fc511ac6161db127c672f567aaffd2dbbd1ca939"], 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18, 0x10000, 0x9, 0x37f, 0x80, 0xffffffffffffffff, 0xdf, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="adb4679043f558e707ed843836c71b23d48a06f60ea311d79455e563e21ac1138f92bb5deadc3a0fdba181ca85f04143b5ffae90d2ff9951ef171386d6bec5af1ab07c35ec3ebe93bfad1276084600000000000000092e6f87699bc1dc2bbfa069535d5c999d54ecc9fc511ac6161db127c672f567aaffd2dbbd1ca939"], 0x0, 0x0, 0x0}) (async) [ 2509.467939][T25517] binder: 25515:25517 ioctl 40046205 0 returned -22 18:25:24 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) 18:25:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:24 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) 18:25:24 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe0, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4008800}, 0x24004000) 18:25:24 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x0, 0xffffffffffffffff}) write$FUSE_LSEEK(r1, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x800, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) (async) write$FUSE_LSEEK(r1, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) (async) 18:25:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18, 0x10000, 0x9, 0x37f, 0x80, 0xffffffffffffffff, 0xdf, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="adb4679043f558e707ed843836c71b23d48a06f60ea311d79455e563e21ac1138f92bb5deadc3a0fdba181ca85f04143b5ffae90d2ff9951ef171386d6bec5af1ab07c35ec3ebe93bfad1276084600000000000000092e6f87699bc1dc2bbfa069535d5c999d54ecc9fc511ac6161db127c672f567aaffd2dbbd1ca939"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="adb4679043f558e707ed843836c71b23d48a06f60ea311d79455e563e21ac1138f92bb5deadc3a0fdba181ca85f04143b5ffae90d2ff9951ef171386d6bec5af1ab07c35ec3ebe93bfad1276084600000000000000092e6f87699bc1dc2bbfa069535d5c999d54ecc9fc511ac6161db127c672f567aaffd2dbbd1ca939"], 0x0, 0x0, 0x0}) 18:25:24 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) 18:25:24 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f0000000100)={"7a267b1216d8bcb84796d66ef0b00860d0613a0adbe1b6c18b2401e5f899", 0x80000000, 0x8, 0x80, [0x6, 0x400, 0x7, 0x8000, 0x80, 0x80000001, 0xc0000, 0xca6, 0x2, 0x9a, 0x9, 0x1, 0x2, 0x9, 0x80000000, 0x40000, 0x9, 0x9]}) [ 2509.760500][T25537] binder: 25534:25537 ioctl 40046205 0 returned -22 18:25:24 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe0, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4008800}, 0x24004000) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe0, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4008800}, 0x24004000) 18:25:24 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000040)=@null) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) 18:25:24 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) 18:25:24 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x0, 0xffffffffffffffff}) (rerun: 64) write$FUSE_LSEEK(r1, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) [ 2509.929271][T25548] binder: 25547:25548 unknown command 3 [ 2509.937628][T25548] binder: 25547:25548 ioctl c0306201 20000000 returned -22 18:25:24 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f0000000100)={"7a267b1216d8bcb84796d66ef0b00860d0613a0adbe1b6c18b2401e5f899", 0x80000000, 0x8, 0x80, [0x6, 0x400, 0x7, 0x8000, 0x80, 0x80000001, 0xc0000, 0xca6, 0x2, 0x9a, 0x9, 0x1, 0x2, 0x9, 0x80000000, 0x40000, 0x9, 0x9]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0}) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f0000000100)={"7a267b1216d8bcb84796d66ef0b00860d0613a0adbe1b6c18b2401e5f899", 0x80000000, 0x8, 0x80, [0x6, 0x400, 0x7, 0x8000, 0x80, 0x80000001, 0xc0000, 0xca6, 0x2, 0x9a, 0x9, 0x1, 0x2, 0x9, 0x80000000, 0x40000, 0x9, 0x9]}) (async) 18:25:25 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/74, 0x4a}, {&(0x7f0000000140)=""/115, 0x73}, {&(0x7f00000001c0)=""/145, 0x91}, {&(0x7f0000000280)=""/189, 0xbd}, {&(0x7f0000000340)}], 0x5}, 0x10002) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 2510.031316][T25556] binder: 25550:25556 ioctl 40046205 0 returned -22 18:25:25 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) 18:25:25 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000040)=@null) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000040)=@null) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) 18:25:25 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x406881, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000080)={0x8, r2}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000000)={0xc, r2}) 18:25:25 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) [ 2510.206468][T25562] binder: 25561:25562 ioctl 40046205 0 returned -22 [ 2510.238905][T25564] binder: 25560:25564 unknown command 3 18:25:25 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/74, 0x4a}, {&(0x7f0000000140)=""/115, 0x73}, {&(0x7f00000001c0)=""/145, 0x91}, {&(0x7f0000000280)=""/189, 0xbd}, {&(0x7f0000000340)}], 0x5}, 0x10002) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 2510.256665][T25564] binder: 25560:25564 ioctl c0306201 20000000 returned -22 [ 2510.290396][T25569] binder: 25567:25569 ioctl 541b 0 returned -22 18:25:25 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) 18:25:25 executing program 3: socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) [ 2510.315486][T25574] binder: 25560:25574 unknown command 3 [ 2510.346961][T25574] binder: 25560:25574 ioctl c0306201 20000000 returned -22 18:25:25 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000040)=@null) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000040)=@null) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) 18:25:25 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x406881, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000080)={0x8, r2}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000000)={0xc, r2}) 18:25:25 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0}) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f0000000100)={"7a267b1216d8bcb84796d66ef0b00860d0613a0adbe1b6c18b2401e5f899", 0x80000000, 0x8, 0x80, [0x6, 0x400, 0x7, 0x8000, 0x80, 0x80000001, 0xc0000, 0xca6, 0x2, 0x9a, 0x9, 0x1, 0x2, 0x9, 0x80000000, 0x40000, 0x9, 0x9]}) [ 2510.466883][T25579] binder: 25578:25579 ioctl 40046205 0 returned -22 [ 2510.488172][T25585] binder: 25581:25585 ioctl 541b 0 returned -22 18:25:25 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/74, 0x4a}, {&(0x7f0000000140)=""/115, 0x73}, {&(0x7f00000001c0)=""/145, 0x91}, {&(0x7f0000000280)=""/189, 0xbd}, {&(0x7f0000000340)}], 0x5}, 0x10002) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/74, 0x4a}, {&(0x7f0000000140)=""/115, 0x73}, {&(0x7f00000001c0)=""/145, 0x91}, {&(0x7f0000000280)=""/189, 0xbd}, {&(0x7f0000000340)}], 0x5}, 0x10002) (async) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async) 18:25:25 executing program 4: landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x4440}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000002c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffffca, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x9, 0x0, 0x21}, @flat=@binder={0x73622a85, 0x100}, @ptr={0x70742a85, 0xc979, &(0x7f0000000180), 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000000c0)={0x7, 0x0, 0x1, 'queue0\x00', 0xfd6}) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, r2}, 0x10) 18:25:25 executing program 3: socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) 18:25:25 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="1c3770a50da82418cee482b854a79bea6523b88316c6aa70c96786cb3cb858844bb6880a636baec30a3ea322eec7bcca230c35230eb8fee5dad61facaa38462d1fbd3b083fcbc4f7c3181fba29d0ec7eb0838a8bfe290f60faca7a96744f4fae48912fba2997"], 0x0, 0x0, 0x0}) [ 2510.623174][T25594] binder: 25593:25594 unknown command 3 18:25:25 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x406881, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000080)={0x8, r2}) (async, rerun: 32) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000000)={0xc, r2}) (rerun: 32) [ 2510.667013][T25594] binder: 25593:25594 ioctl c0306201 20000000 returned -22 [ 2510.698647][T25597] binder: 25596:25597 ioctl 40046205 0 returned -22 18:25:25 executing program 4: landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x4440}, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000002c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffffca, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x9, 0x0, 0x21}, @flat=@binder={0x73622a85, 0x100}, @ptr={0x70742a85, 0xc979, &(0x7f0000000180), 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000006c0)={0x101}) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000000c0)={0x7, 0x0, 0x1, 'queue0\x00', 0xfd6}) (rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, r2}, 0x10) 18:25:25 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x88, 0x0, &(0x7f0000000200)=[@dead_binder_done, @register_looper, @acquire_done={0x40106309, 0x3}, @exit_looper, @decrefs={0x40046307, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x1100, 0x3}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @acquire_done={0x40106309, 0x2}], 0xfc, 0x0, &(0x7f00000002c0)="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"}) 18:25:25 executing program 3: socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) [ 2510.754917][T25603] binder: 25600:25603 unknown command 808482864 [ 2510.767049][T25597] binder: 25596:25597 ioctl 40046205 0 returned -22 [ 2510.778832][T25603] binder: 25600:25603 ioctl c0306201 20000000 returned -22 18:25:25 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xa81) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$rose(r2, &(0x7f00000000c0)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f0000000100)=0x1c, 0x80800) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$rose(r3, 0x104, 0x1, &(0x7f0000000000), &(0x7f0000000140)=0x4) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 18:25:25 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="1c3770a50da82418cee482b854a79bea6523b88316c6aa70c96786cb3cb858844bb6880a636baec30a3ea322eec7bcca230c35230eb8fee5dad61facaa38462d1fbd3b083fcbc4f7c3181fba29d0ec7eb0838a8bfe290f60faca7a96744f4fae48912fba2997"], 0x0, 0x0, 0x0}) [ 2510.839786][T25607] binder: 25606:25607 ioctl 541b 0 returned -22 18:25:25 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=""/220, 0xdc, 0x0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x48001002, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f00000002c0)) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000180)={0x8}) r3 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r3, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRES16, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x2000020}, 0x20000) 18:25:25 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x2, 0x0) (async) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000180)={0x8}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x88, 0x0, &(0x7f0000000200)=[@dead_binder_done, @register_looper, @acquire_done={0x40106309, 0x3}, @exit_looper, @decrefs={0x40046307, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x1100, 0x3}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @acquire_done={0x40106309, 0x2}], 0xfc, 0x0, &(0x7f00000002c0)="d1dca96e21803ac59058504403b5a228e93ed985192d6d03c7cd88836370cb8b13303b938483f4247d3de85137a8d899b9d891aa368c2587488831829fcfd9573cb019dd3d5b8cdf87ae3aa97e20f3473348f00fdc9b6773684e5dae463d2802ba5d9fa0108461cbc0f4cff7fa75e017e0459ab842cf8325f9bef41356583cfd5c072dbd951366201747bfaf8595995694d4a7ef1b73a91b391c47414a9b3c688348416d8869c1aa47d85b3108d93398aec4cd6e8bf7eeb7817e0a49af002285b2efa6eb50bd08e2730a6a8cab9528dc2c81b723fdb406ea63712b38b8c1fd8eab3abef183e91adb4ecae507a6ab44c8269967ad80f473de6c71f29d"}) 18:25:26 executing program 4: landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x4440}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000002c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffffca, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x9, 0x0, 0x21}, @flat=@binder={0x73622a85, 0x100}, @ptr={0x70742a85, 0xc979, &(0x7f0000000180), 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000000c0)={0x7, 0x0, 0x1, 'queue0\x00', 0xfd6}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, r2}, 0x10) 18:25:26 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0) [ 2510.993132][T25620] binder: 25618:25620 unknown command 808482864 [ 2511.019117][T25620] binder: 25618:25620 ioctl c0306201 20000000 returned -22 18:25:26 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="1c3770a50da82418cee482b854a79bea6523b88316c6aa70c96786cb3cb858844bb6880a636baec30a3ea322eec7bcca230c35230eb8fee5dad61facaa38462d1fbd3b083fcbc4f7c3181fba29d0ec7eb0838a8bfe290f60faca7a96744f4fae48912fba2997"], 0x0, 0x0, 0x0}) [ 2511.079730][T25619] binder: 25616:25619 ioctl 40046205 0 returned -22 [ 2511.103067][T25622] binder: 25621:25622 ioctl 541b 0 returned -22 18:25:26 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xa81) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) accept4$rose(r2, &(0x7f00000000c0)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f0000000100)=0x1c, 0x80800) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 32) recvfrom$rose(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) getsockopt$rose(r3, 0x104, 0x1, &(0x7f0000000000), &(0x7f0000000140)=0x4) (async) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 18:25:26 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=""/220, 0xdc, 0x0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x48001002, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') (async) fanotify_mark(0xffffffffffffffff, 0x80, 0x48001002, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f00000002c0)) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000180)={0x8}) (async) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000180)={0x8}) r3 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r3, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRES16, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x2000020}, 0x20000) 18:25:26 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x88, 0x0, &(0x7f0000000200)=[@dead_binder_done, @register_looper, @acquire_done={0x40106309, 0x3}, @exit_looper, @decrefs={0x40046307, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x1100, 0x3}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @acquire_done={0x40106309, 0x2}], 0xfc, 0x0, &(0x7f00000002c0)="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"}) 18:25:26 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0) [ 2511.252668][T25630] binder: 25629:25630 unknown command 808482864 18:25:26 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f00000000c0)={0xb8, 0x0, r2, [{0x2, 0x3, 0x2, 0x0, '(\''}, {0x2, 0x7e60, 0x0, 0x4}, {0x6, 0x45da, 0x13, 0x324, './binderfs/binder1\x00'}, {0x4, 0x8d2, 0x1, 0x1, '\\'}, {0x6, 0x0, 0x6, 0x6, '-$@/){'}]}, 0xb8) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2511.304022][T25630] binder: 25629:25630 ioctl c0306201 20000000 returned -22 18:25:26 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06630040fdffffff"], 0x0, 0x0, 0x0}) r1 = socket$isdn(0x22, 0x3, 0x21) bind$isdn(r1, &(0x7f0000000040)={0x22, 0x1, 0x5, 0x5c}, 0x6) 18:25:26 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = getpgid(0x0) setpriority(0x2, r1, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, {{0x6, 0x0, 0x2, r1}}}, 0x28) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000200)=[@release, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/59, 0x3b, 0x0, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/13, 0xd, 0x1, 0x12}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 18:25:26 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xa81) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$rose(r2, &(0x7f00000000c0)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f0000000100)=0x1c, 0x80800) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) recvfrom$rose(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getsockopt$rose(r3, 0x104, 0x1, &(0x7f0000000000), &(0x7f0000000140)=0x4) (async) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 18:25:26 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0) [ 2511.441481][T25645] binder: 25638:25645 ioctl 541b 0 returned -22 18:25:26 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f00000000c0)={0xb8, 0x0, r2, [{0x2, 0x3, 0x2, 0x0, '(\''}, {0x2, 0x7e60, 0x0, 0x4}, {0x6, 0x45da, 0x13, 0x324, './binderfs/binder1\x00'}, {0x4, 0x8d2, 0x1, 0x1, '\\'}, {0x6, 0x0, 0x6, 0x6, '-$@/){'}]}, 0xb8) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020}, 0x2020) (async) write$FUSE_DIRENT(r1, &(0x7f00000000c0)={0xb8, 0x0, r2, [{0x2, 0x3, 0x2, 0x0, '(\''}, {0x2, 0x7e60, 0x0, 0x4}, {0x6, 0x45da, 0x13, 0x324, './binderfs/binder1\x00'}, {0x4, 0x8d2, 0x1, 0x1, '\\'}, {0x6, 0x0, 0x6, 0x6, '-$@/){'}]}, 0xb8) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 18:25:26 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=""/220, 0xdc, 0x0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x48001002, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f00000002c0)) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000180)={0x8}) r3 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r3, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRES16, @ANYBLOB="a5a32f46352c37ab0769c67c6b778ac6fd3f4aebe453586fc28e70b80be3c9cc14ed8e33d4ded155c4af18898ad94f5efb97edfe584aead27387d3917b3fdb08a2ac638d8a6cbe1e58bfe32abcf5e863204d2bcfe07cc30020cd66256ff86b8bd7c9b1d54b018439ddcf6715bbcaee6bf4f440dcf1eeb721c4c8955d9fc7503d0531928bd164d0ed11177391e0e035e8e9efbffe215122ade3662d3bf7377748107f81983abb9ada7f6ca82547b92c1ed608b2e4dd05007ba8077e572ad25fb0f9d1d8901cc4582d85ce971d5f82c8374420bab58acce351839555701c548020ea32e90576df4d02270f5cfd1a0a448416ec9f048d8d63d86eafa8cee3b660dfd484cf060310e8b8a973f9d213b866711c9f8c06608d03ff83a200d322358bdf82ac3e6b6feeae656f4d24ccac56cbdcd9711933315ae9787c14aaeecda00de5861f38adc0480f8f3a57d4e4bde1de6ad83e0aa68634f47390ef944f2f034a41"], 0x28}, 0x1, 0x0, 0x0, 0x2000020}, 0x20000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=""/220, 0xdc, 0x0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x2, 0x0) (async) fanotify_mark(0xffffffffffffffff, 0x80, 0x48001002, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') (async) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f00000002c0)) (async) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000180)={0x8}) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) connect$rxrpc(r3, 0x0, 0x0) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) (async) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRES16, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x2000020}, 0x20000) (async) [ 2511.536340][T25649] binder: 25647:25649 unknown command 1073767174 [ 2511.542758][T25649] binder: 25647:25649 ioctl c0306201 20000000 returned -22 18:25:26 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = getpgid(0x0) setpriority(0x2, r1, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, {{0x6, 0x0, 0x2, r1}}}, 0x28) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000200)=[@release, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/59, 0x3b, 0x0, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/13, 0xd, 0x1, 0x12}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) getpgid(0x0) (async) setpriority(0x2, r1, 0x0) (async) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, {{0x6, 0x0, 0x2, r1}}}, 0x28) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000200)=[@release, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/59, 0x3b, 0x0, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/13, 0xd, 0x1, 0x12}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) (async) 18:25:26 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000), 0x0) 18:25:26 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06630040fdffffff"], 0x0, 0x0, 0x0}) r1 = socket$isdn(0x22, 0x3, 0x21) bind$isdn(r1, &(0x7f0000000040)={0x22, 0x1, 0x5, 0x5c}, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06630040fdffffff"], 0x0, 0x0, 0x0}) (async) socket$isdn(0x22, 0x3, 0x21) (async) bind$isdn(r1, &(0x7f0000000040)={0x22, 0x1, 0x5, 0x5c}, 0x6) (async) [ 2511.674370][T25655] binder: 25653:25655 ioctl 40046205 0 returned -22 [ 2511.690401][T25661] binder: 25658:25661 ioctl 541b 0 returned -22 18:25:26 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x800, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0x200000000, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0xfffffffffffffff7) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000040)=0xf4240) [ 2511.737908][T25661] binder: 25658:25661 ioctl 541b 0 returned -22 18:25:26 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f00000000c0)={0xb8, 0x0, r2, [{0x2, 0x3, 0x2, 0x0, '(\''}, {0x2, 0x7e60, 0x0, 0x4}, {0x6, 0x45da, 0x13, 0x324, './binderfs/binder1\x00'}, {0x4, 0x8d2, 0x1, 0x1, '\\'}, {0x6, 0x0, 0x6, 0x6, '-$@/){'}]}, 0xb8) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020}, 0x2020) (async) write$FUSE_DIRENT(r1, &(0x7f00000000c0)={0xb8, 0x0, r2, [{0x2, 0x3, 0x2, 0x0, '(\''}, {0x2, 0x7e60, 0x0, 0x4}, {0x6, 0x45da, 0x13, 0x324, './binderfs/binder1\x00'}, {0x4, 0x8d2, 0x1, 0x1, '\\'}, {0x6, 0x0, 0x6, 0x6, '-$@/){'}]}, 0xb8) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 18:25:26 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = getpgid(0x0) setpriority(0x2, r1, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, {{0x6, 0x0, 0x2, r1}}}, 0x28) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000200)=[@release, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/59, 0x3b, 0x0, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/13, 0xd, 0x1, 0x12}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000200)=[@release, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/59, 0x3b, 0x0, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/13, 0xd, 0x1, 0x12}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 18:25:26 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000), 0x0) 18:25:26 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000002240)=@gcm_256={{0x303}, "39da90676e5d08f1", "abce8a65c2a4e4c8f6cafbe9bcd9799e5b449e1b2546538eed1e22f69fd8e28b", "9a54975d", "118f248820b12660"}, 0x38) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000000280)={0x20, 0x0, 0x0, {0x8, 0x4, 0x8000, 0x1}}, 0x20) r3 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8c, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x3}, @dead_binder_done, @acquire_done, @increfs, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="852a6873000100c7ae0fe5000200000000000000000000000000000085616466000000000a0000000000000001000000000000002000000000000000852a6466", @ANYRES32=r3, @ANYBLOB='\x00'/12], &(0x7f0000000040)={0x0, 0x18, 0x38}}, 0x40}, @increfs={0x40046304, 0x1}], 0xa, 0x0, &(0x7f0000000200)="d1dab830c0441eeb27d9"}) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) [ 2511.918664][T25680] binder: 25676:25680 unknown command 1073767174 [ 2511.942522][T25680] binder: 25676:25680 ioctl c0306201 20000000 returned -22 [ 2511.964108][T25679] binder: 25677:25679 ioctl 40046205 0 returned -22 [ 2511.988834][T25688] binder: 25676:25688 unknown command 1073767174 [ 2512.007592][T25693] binder: 25687:25693 ioctl 541b 0 returned -22 18:25:26 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000100)={0xffff, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x4}, {0xffffffffffff92e9, 0x7}, 0x6}) 18:25:27 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0663044000000000193a9acaad10af86a85b896104c22c3fb748c43e7e7a0520e56a7fc89261d467d3bee19697b884b11df920f82ceb76003275999c617be5eee125fb146bf6bb1ded2fced6c83481fd50c228fff5e74d659860c6ca82f0afd00e2a620d627953c3659ec81e046860bdd43948d193d900ba6898a15383899c9407bf"], 0x0, 0x0, 0x0}) [ 2512.022064][T25688] binder: 25676:25688 ioctl c0306201 20000000 returned -22 18:25:27 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000), 0x0) 18:25:27 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000002240)=@gcm_256={{0x303}, "39da90676e5d08f1", "abce8a65c2a4e4c8f6cafbe9bcd9799e5b449e1b2546538eed1e22f69fd8e28b", "9a54975d", "118f248820b12660"}, 0x38) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) (async) write$FUSE_IOCTL(r2, &(0x7f0000000280)={0x20, 0x0, 0x0, {0x8, 0x4, 0x8000, 0x1}}, 0x20) (async) r3 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8c, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x3}, @dead_binder_done, @acquire_done, @increfs, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="852a6873000100c7ae0fe5000200000000000000000000000000000085616466000000000a0000000000000001000000000000002000000000000000852a6466", @ANYRES32=r3, @ANYBLOB='\x00'/12], &(0x7f0000000040)={0x0, 0x18, 0x38}}, 0x40}, @increfs={0x40046304, 0x1}], 0xa, 0x0, &(0x7f0000000200)="d1dab830c0441eeb27d9"}) (async) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) 18:25:27 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06630040fdffffff"], 0x0, 0x0, 0x0}) r1 = socket$isdn(0x22, 0x3, 0x21) bind$isdn(r1, &(0x7f0000000040)={0x22, 0x1, 0x5, 0x5c}, 0x6) 18:25:27 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x800, 0x0) syz_open_dev$vcsu(&(0x7f0000000700), 0x200000000, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0x200000000, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0xfffffffffffffff7) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000040)=0xf4240) [ 2512.224140][T25701] binder: 25697:25701 ioctl 541b 0 returned -22 [ 2512.246202][T25705] binder: 25700:25705 unknown command 1073767174 [ 2512.250214][T25706] binder: 25703:25706 ioctl 40046205 0 returned -22 18:25:27 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea", 0xd) 18:25:27 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0663044000000000193a9acaad10af86a85b896104c22c3fb748c43e7e7a0520e56a7fc89261d467d3bee19697b884b11df920f82ceb76003275999c617be5eee125fb146bf6bb1ded2fced6c83481fd50c228fff5e74d659860c6ca82f0afd00e2a620d627953c3659ec81e046860bdd43948d193d900ba6898a15383899c9407bf"], 0x0, 0x0, 0x0}) 18:25:27 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000100)={0xffff, 0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x4}, {0xffffffffffff92e9, 0x7}, 0x6}) 18:25:27 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000002240)=@gcm_256={{0x303}, "39da90676e5d08f1", "abce8a65c2a4e4c8f6cafbe9bcd9799e5b449e1b2546538eed1e22f69fd8e28b", "9a54975d", "118f248820b12660"}, 0x38) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000000280)={0x20, 0x0, 0x0, {0x8, 0x4, 0x8000, 0x1}}, 0x20) (async) write$FUSE_IOCTL(r2, &(0x7f0000000280)={0x20, 0x0, 0x0, {0x8, 0x4, 0x8000, 0x1}}, 0x20) r3 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8c, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x3}, @dead_binder_done, @acquire_done, @increfs, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="852a6873000100c7ae0fe5000200000000000000000000000000000085616466000000000a0000000000000001000000000000002000000000000000852a6466", @ANYRES32=r3, @ANYBLOB='\x00'/12], &(0x7f0000000040)={0x0, 0x18, 0x38}}, 0x40}, @increfs={0x40046304, 0x1}], 0xa, 0x0, &(0x7f0000000200)="d1dab830c0441eeb27d9"}) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) [ 2512.280423][T25705] binder: 25700:25705 ioctl c0306201 20000000 returned -22 [ 2512.299984][T25707] binder: 25703:25707 ioctl 40046205 0 returned -22 18:25:27 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) 18:25:27 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x800, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0x200000000, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0xfffffffffffffff7) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000040)=0xf4240) 18:25:27 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0663044000000000193a9acaad10af86a85b896104c22c3fb748c43e7e7a0520e56a7fc89261d467d3bee19697b884b11df920f82ceb76003275999c617be5eee125fb146bf6bb1ded2fced6c83481fd50c228fff5e74d659860c6ca82f0afd00e2a620d627953c3659ec81e046860bdd43948d193d900ba6898a15383899c9407bf"], 0x0, 0x0, 0x0}) 18:25:27 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000), 0x0) 18:25:27 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) 18:25:27 executing program 4: openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000100)={0xffff, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x4}, {0xffffffffffff92e9, 0x7}, 0x6}) [ 2512.543164][T25720] binder: 25713:25720 ioctl 541b 0 returned -22 [ 2512.560167][T25725] binder: 25717:25725 ioctl 40046205 0 returned -22 18:25:27 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000), 0x0) 18:25:27 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 18:25:27 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9da3183f269d23c5eb10ea5d96cedd30b3746059de0200000000000001c025d1fa193cb4203f0e3a24f7f6820be3120466c93110ab66fab2c574cc50099166f83acb31209ee741ce801e32abb11e71f27cf31b30e4b8606c80a183e452645f75dd4bdbdee40e482a17592ed100166dbee0d64df59ad20f15849625923662e51b7c7e05148ac879902cf5df0732ce8354663c6e204474bc21724d759ab8af93815171b82d26c45d6267cfc99f5abc45096553c9f4e026845952dc6fdf74e50769b7f85f3d7950692f3d00"/214], 0x0, 0x0, 0x0}) 18:25:27 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) 18:25:27 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) [ 2512.855779][T25743] binder: 25737:25743 ioctl 40046205 0 returned -22 [ 2512.856517][T25741] binder: 25738:25741 unknown command 1058579357 [ 2512.888422][T25741] binder: 25738:25741 ioctl c0306201 20000000 returned -22 18:25:28 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) 18:25:28 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000), 0x0) 18:25:28 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, 0x0, 0x0) sendto$rxrpc(r1, &(0x7f0000000200)="67087c4442ce675f164bf08cc6cdca6d498afef976160fb4497148ba54e9c9a82bea0fb921c5470b0a06185c252b7cc2889ef08baa9e417a2e3ea47f0671ea40ed3cf0cab0832b790918a53b5176a868112de2d2590cea25f3cdff563c45fcb1e16ba5176c8ba03445da30e644796ddea4046e00e241c7e2b8f63909a36855c2f6e69f9f8b2d4d0406270b61e4c12109a6240cf82a40434ec5dcefa28eac0067e16b2faa504fc77c6f360544751fe6b6a0f7874a0c43143fdd88cdcbe7b1b1dcfc8edcafa7e3ada8fb68", 0xca, 0x20000000, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x31, {0x2, 0x4e21, @remote}}, 0x24) 18:25:28 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 18:25:28 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9da3183f269d23c5eb10ea5d96cedd30b3746059de0200000000000001c025d1fa193cb4203f0e3a24f7f6820be3120466c93110ab66fab2c574cc50099166f83acb31209ee741ce801e32abb11e71f27cf31b30e4b8606c80a183e452645f75dd4bdbdee40e482a17592ed100166dbee0d64df59ad20f15849625923662e51b7c7e05148ac879902cf5df0732ce8354663c6e204474bc21724d759ab8af93815171b82d26c45d6267cfc99f5abc45096553c9f4e026845952dc6fdf74e50769b7f85f3d7950692f3d00"/214], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9da3183f269d23c5eb10ea5d96cedd30b3746059de0200000000000001c025d1fa193cb4203f0e3a24f7f6820be3120466c93110ab66fab2c574cc50099166f83acb31209ee741ce801e32abb11e71f27cf31b30e4b8606c80a183e452645f75dd4bdbdee40e482a17592ed100166dbee0d64df59ad20f15849625923662e51b7c7e05148ac879902cf5df0732ce8354663c6e204474bc21724d759ab8af93815171b82d26c45d6267cfc99f5abc45096553c9f4e026845952dc6fdf74e50769b7f85f3d7950692f3d00"/214], 0x0, 0x0, 0x0}) (async) 18:25:28 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setpriority(0x2, r0, 0x7) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f00000020c0)={0x4, 0x5, 0x2, 0x0, 0x7, 0x2, 0x1f, 0x0, 0x1, 0x81, 0x6, "f2ff7917c2805d83d9530683ec5434098a498c8a1be8f6fe9621bb7b07372d71"}) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x6440) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x400, 0x0, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xffffffff00000001) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) [ 2513.432653][T25753] binder: 25749:25753 ioctl 40046205 0 returned -22 [ 2513.454151][T25755] binder: 25749:25755 ioctl 40046205 0 returned -22 18:25:28 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, 0x0, 0x0) (async) sendto$rxrpc(r1, &(0x7f0000000200)="67087c4442ce675f164bf08cc6cdca6d498afef976160fb4497148ba54e9c9a82bea0fb921c5470b0a06185c252b7cc2889ef08baa9e417a2e3ea47f0671ea40ed3cf0cab0832b790918a53b5176a868112de2d2590cea25f3cdff563c45fcb1e16ba5176c8ba03445da30e644796ddea4046e00e241c7e2b8f63909a36855c2f6e69f9f8b2d4d0406270b61e4c12109a6240cf82a40434ec5dcefa28eac0067e16b2faa504fc77c6f360544751fe6b6a0f7874a0c43143fdd88cdcbe7b1b1dcfc8edcafa7e3ada8fb68", 0xca, 0x20000000, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x31, {0x2, 0x4e21, @remote}}, 0x24) 18:25:28 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 18:25:28 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) 18:25:28 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e8", 0x7) [ 2513.477392][T25754] binder: 25751:25754 unknown command 1058579357 [ 2513.524071][T25754] binder: 25751:25754 ioctl c0306201 20000000 returned -22 [ 2513.565272][T25757] binder: 25751:25757 unknown command 1058579357 [ 2513.571714][T25757] binder: 25751:25757 ioctl c0306201 20000000 returned -22 [ 2513.603949][T25763] binder: 25759:25763 ioctl 40046205 0 returned -22 18:25:28 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, 0x0, 0x0) sendto$rxrpc(r1, &(0x7f0000000200)="67087c4442ce675f164bf08cc6cdca6d498afef976160fb4497148ba54e9c9a82bea0fb921c5470b0a06185c252b7cc2889ef08baa9e417a2e3ea47f0671ea40ed3cf0cab0832b790918a53b5176a868112de2d2590cea25f3cdff563c45fcb1e16ba5176c8ba03445da30e644796ddea4046e00e241c7e2b8f63909a36855c2f6e69f9f8b2d4d0406270b61e4c12109a6240cf82a40434ec5dcefa28eac0067e16b2faa504fc77c6f360544751fe6b6a0f7874a0c43143fdd88cdcbe7b1b1dcfc8edcafa7e3ada8fb68", 0xca, 0x20000000, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x31, {0x2, 0x4e21, @remote}}, 0x24) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) connect$rxrpc(r1, 0x0, 0x0) (async) sendto$rxrpc(r1, &(0x7f0000000200)="67087c4442ce675f164bf08cc6cdca6d498afef976160fb4497148ba54e9c9a82bea0fb921c5470b0a06185c252b7cc2889ef08baa9e417a2e3ea47f0671ea40ed3cf0cab0832b790918a53b5176a868112de2d2590cea25f3cdff563c45fcb1e16ba5176c8ba03445da30e644796ddea4046e00e241c7e2b8f63909a36855c2f6e69f9f8b2d4d0406270b61e4c12109a6240cf82a40434ec5dcefa28eac0067e16b2faa504fc77c6f360544751fe6b6a0f7874a0c43143fdd88cdcbe7b1b1dcfc8edcafa7e3ada8fb68", 0xca, 0x20000000, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x31, {0x2, 0x4e21, @remote}}, 0x24) (async) 18:25:28 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setpriority(0x2, r0, 0x7) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f00000020c0)={0x4, 0x5, 0x2, 0x0, 0x7, 0x2, 0x1f, 0x0, 0x1, 0x81, 0x6, "f2ff7917c2805d83d9530683ec5434098a498c8a1be8f6fe9621bb7b07372d71"}) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x6440) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x400, 0x0, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xffffffff00000001) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 18:25:28 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000)="cc", 0x1) 18:25:28 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) 18:25:28 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9da3183f269d23c5eb10ea5d96cedd30b3746059de0200000000000001c025d1fa193cb4203f0e3a24f7f6820be3120466c93110ab66fab2c574cc50099166f83acb31209ee741ce801e32abb11e71f27cf31b30e4b8606c80a183e452645f75dd4bdbdee40e482a17592ed100166dbee0d64df59ad20f15849625923662e51b7c7e05148ac879902cf5df0732ce8354663c6e204474bc21724d759ab8af93815171b82d26c45d6267cfc99f5abc45096553c9f4e026845952dc6fdf74e50769b7f85f3d7950692f3d00"/214], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9da3183f269d23c5eb10ea5d96cedd30b3746059de0200000000000001c025d1fa193cb4203f0e3a24f7f6820be3120466c93110ab66fab2c574cc50099166f83acb31209ee741ce801e32abb11e71f27cf31b30e4b8606c80a183e452645f75dd4bdbdee40e482a17592ed100166dbee0d64df59ad20f15849625923662e51b7c7e05148ac879902cf5df0732ce8354663c6e204474bc21724d759ab8af93815171b82d26c45d6267cfc99f5abc45096553c9f4e026845952dc6fdf74e50769b7f85f3d7950692f3d00"/214], 0x0, 0x0, 0x0}) 18:25:28 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x5402) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:25:28 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) 18:25:28 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setpriority(0x2, r0, 0x7) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f00000020c0)={0x4, 0x5, 0x2, 0x0, 0x7, 0x2, 0x1f, 0x0, 0x1, 0x81, 0x6, "f2ff7917c2805d83d9530683ec5434098a498c8a1be8f6fe9621bb7b07372d71"}) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x6440) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x400, 0x0, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xffffffff00000001) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) [ 2513.842471][T25778] binder: 25775:25778 unknown command 1058579357 18:25:28 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0, 0xffffffffffffffff}) connect$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000280)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bind$pptp(r2, &(0x7f0000000180)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) 18:25:28 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000), 0x0) [ 2513.891458][T25781] binder: 25775:25781 unknown command 1058579357 [ 2513.894645][T25778] binder: 25775:25778 ioctl c0306201 20000000 returned -22 [ 2513.924116][T25781] binder: 25775:25781 ioctl c0306201 20000000 returned -22 18:25:28 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000180)={0x8}) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_POLL(r2, &(0x7f00000012c0)={0x18, 0x0, 0x0, {0x3f}}, 0x18) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000001180)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001100)={@fda={0x66646185, 0x9, 0x2, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/4096, 0x1000, 0x2, 0x8}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000000c0)={0x0, 0x20, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000001200)={0x7fffffff, 0x401, 0x1, 'queue1\x00', 0x81}) 18:25:28 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) 18:25:29 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 18:25:29 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, 0x0) (async, rerun: 64) ioctl$SNDCTL_TMR_START(r0, 0x5402) (rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x800, 0x0) (async) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:25:29 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000), 0x0) 18:25:29 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0, 0xffffffffffffffff}) connect$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) (async) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000280)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bind$pptp(r2, &(0x7f0000000180)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) 18:25:29 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) sendto$isdn(r1, &(0x7f0000000100)={0x101, 0x1ffc0000, "c40b13e5d32bd991a539c88b9c725eb06bd33ab25aa6094483e9621a147c3de5637f07ed2569bb97d0b850125e90df912da1c6d789e0513ea6fc"}, 0x42, 0x4048080, &(0x7f0000000180)={0x22, 0x4, 0xf5, 0x0, 0xda}, 0x6) 18:25:29 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000180)={0x8}) (async) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000180)={0x8}) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_POLL(r2, &(0x7f00000012c0)={0x18, 0x0, 0x0, {0x3f}}, 0x18) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000001180)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001100)={@fda={0x66646185, 0x9, 0x2, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/4096, 0x1000, 0x2, 0x8}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000000c0)={0x0, 0x20, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000001180)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001100)={@fda={0x66646185, 0x9, 0x2, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/4096, 0x1000, 0x2, 0x8}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000000c0)={0x0, 0x20, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000001200)={0x7fffffff, 0x401, 0x1, 'queue1\x00', 0x81}) [ 2514.251165][T25800] binder: 25797:25800 ioctl 40046205 0 returned -22 18:25:29 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000), 0x0) 18:25:29 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0, 0xffffffffffffffff}) connect$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) (async) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000280)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bind$pptp(r2, &(0x7f0000000180)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) [ 2514.337452][T25808] binder: 25806:25808 ioctl 40046205 0 returned -22 18:25:29 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) 18:25:29 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) sendto$isdn(r1, &(0x7f0000000100)={0x101, 0x1ffc0000, "c40b13e5d32bd991a539c88b9c725eb06bd33ab25aa6094483e9621a147c3de5637f07ed2569bb97d0b850125e90df912da1c6d789e0513ea6fc"}, 0x42, 0x4048080, &(0x7f0000000180)={0x22, 0x4, 0xf5, 0x0, 0xda}, 0x6) 18:25:29 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000180)={0x8}) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_POLL(r2, &(0x7f00000012c0)={0x18, 0x0, 0x0, {0x3f}}, 0x18) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000001180)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001100)={@fda={0x66646185, 0x9, 0x2, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/4096, 0x1000, 0x2, 0x8}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000000c0)={0x0, 0x20, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000001200)={0x7fffffff, 0x401, 0x1, 'queue1\x00', 0x81}) 18:25:29 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, 0x0) (async) ioctl$SNDCTL_TMR_START(r0, 0x5402) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x800, 0x0) (async) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:25:29 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000100)={0xffff, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x4}, {0xffffffffffff92e9, 0x7}, 0x6}) 18:25:29 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x800, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0x200000000, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0xfffffffffffffff7) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000040)=0xf4240) 18:25:29 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000100)=[@clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@fda={0x66646185, 0x4, 0x1, 0xe}, @flat=@weak_handle={0x77682a85, 0xb, 0x1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000000c0)}, 0x400}, @acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) 18:25:29 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0663043ab0dd2f49db789396d9595d82a7839ebf4a"], 0x0, 0x0, 0x0}) [ 2514.618701][T25831] binder: 25826:25831 ioctl 40046205 0 returned -22 18:25:29 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async) sendto$isdn(r1, &(0x7f0000000100)={0x101, 0x1ffc0000, "c40b13e5d32bd991a539c88b9c725eb06bd33ab25aa6094483e9621a147c3de5637f07ed2569bb97d0b850125e90df912da1c6d789e0513ea6fc"}, 0x42, 0x4048080, &(0x7f0000000180)={0x22, 0x4, 0xf5, 0x0, 0xda}, 0x6) 18:25:29 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0) 18:25:29 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000100)=[@clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@fda={0x66646185, 0x4, 0x1, 0xe}, @flat=@weak_handle={0x77682a85, 0xb, 0x1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000000c0)}, 0x400}, @acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) [ 2514.742278][T25836] binder: 25834:25836 ioctl 40046205 0 returned -22 18:25:29 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000040)='@#\x00', 0x3) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06bef988f12e0383e0a1c1d511cc8d79ee1508a14eca35f03eb6b5749d4cdadd611aac5d3e91dda8e3ab17246c370ac26897298bbd27f63d5a3547cb794263ed0d6e1b28901b30fc3ac0d6c91964cc2dc2c93c17f00f"], 0x0, 0x0, 0x0}) [ 2514.798884][T25839] binder: 25838:25839 unknown command 973366022 [ 2514.837544][T25839] binder: 25838:25839 ioctl c0306201 20000000 returned -22 18:25:29 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=""/220, 0xdc, 0x0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x48001002, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f00000002c0)) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000180)={0x8}) r3 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r3, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRES16, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x2000020}, 0x20000) 18:25:29 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0663043ab0dd2f49db789396d9595d82a7839ebf4a"], 0x0, 0x0, 0x0}) 18:25:29 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000080)={0x4, 0x8000, 0x4, 0x4, 0xbdf0, 0x7fffffff}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 2514.893968][T25844] binder: 25840:25844 ioctl 40046205 0 returned -22 [ 2514.932427][T25848] binder: 25846:25848 unknown command 2298068486 18:25:29 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0) 18:25:29 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000100)=[@clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@fda={0x66646185, 0x4, 0x1, 0xe}, @flat=@weak_handle={0x77682a85, 0xb, 0x1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000000c0)}, 0x400}, @acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) [ 2514.964116][T25848] binder: 25846:25848 ioctl c0306201 20000000 returned -22 18:25:30 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, 0x0, 0x0) (async, rerun: 64) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000040)='@#\x00', 0x3) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06bef988f12e0383e0a1c1d511cc8d79ee1508a14eca35f03eb6b5749d4cdadd611aac5d3e91dda8e3ab17246c370ac26897298bbd27f63d5a3547cb794263ed0d6e1b28901b30fc3ac0d6c91964cc2dc2c93c17f00f"], 0x0, 0x0, 0x0}) [ 2515.038002][T25853] binder: 25850:25853 unknown command 973366022 [ 2515.059415][T25852] binder: 25851:25852 ioctl 541b 0 returned -22 18:25:30 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000080)={0x4, 0x8000, 0x4, 0x4, 0xbdf0, 0x7fffffff}) (async) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 2515.092465][T25853] binder: 25850:25853 ioctl c0306201 20000000 returned -22 18:25:30 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=""/220, 0xdc, 0x0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x48001002, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f00000002c0)) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000180)={0x8}) r3 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r3, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRES16, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x2000020}, 0x20000) 18:25:30 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0) 18:25:30 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0663043ab0dd2f49db789396d9595d82a7839ebf4a"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0663043ab0dd2f49db789396d9595d82a7839ebf4a"], 0x0, 0x0, 0x0}) (async) 18:25:30 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000080)={0x4, 0x8000, 0x4, 0x4, 0xbdf0, 0x7fffffff}) (async) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 18:25:30 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000000c0)={0x9, 0xcc, 0x0, 'queue0\x00', 0x5}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) [ 2515.209201][T25864] binder: 25859:25864 unknown command 2298068486 [ 2515.245867][T25864] binder: 25859:25864 ioctl c0306201 20000000 returned -22 [ 2515.288276][T25866] binder: 25865:25866 ioctl 541b 0 returned -22 18:25:30 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=""/220, 0xdc, 0x0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x48001002, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f00000002c0)) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000180)={0x8}) r3 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r3, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRES16, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x2000020}, 0x20000) 18:25:30 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000040)='@#\x00', 0x3) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06bef988f12e0383e0a1c1d511cc8d79ee1508a14eca35f03eb6b5749d4cdadd611aac5d3e91dda8e3ab17246c370ac26897298bbd27f63d5a3547cb794263ed0d6e1b28901b30fc3ac0d6c91964cc2dc2c93c17f00f"], 0x0, 0x0, 0x0}) 18:25:30 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000000c0)={0x9, 0xcc, 0x0, 'queue0\x00', 0x5}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) [ 2515.367062][T25874] binder: 25869:25874 unknown command 973366022 [ 2515.385374][T25874] binder: 25869:25874 ioctl c0306201 20000000 returned -22 [ 2515.395576][T25876] binder: 25869:25876 unknown command 973366022 [ 2515.401996][T25876] binder: 25869:25876 ioctl c0306201 20000000 returned -22 18:25:30 executing program 3: setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) 18:25:30 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0663043ab0dd2f49db789396d9595d82a7839ebf4a"], 0x0, 0x0, 0x0}) 18:25:30 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) [ 2515.586062][T25880] binder: 25877:25880 ioctl 541b 0 returned -22 [ 2515.591958][T25879] binder: 25878:25879 unknown command 2298068486 [ 2515.600780][T25879] binder: 25878:25879 ioctl c0306201 20000000 returned -22 18:25:30 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) write$apparmor_current(r1, &(0x7f0000000040)=@profile={'permprofile ', '$.(\xaa$!\x00'}, 0x13) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:30 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000000c0)={0x9, 0xcc, 0x0, 'queue0\x00', 0x5}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) 18:25:30 executing program 3: setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) 18:25:30 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=""/220, 0xdc, 0x0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x48001002, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f00000002c0)) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) r2 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r2, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) 18:25:30 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 18:25:30 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xa81) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$rose(r2, &(0x7f00000000c0)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f0000000100)=0x1c, 0x80800) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$rose(r3, 0x104, 0x1, &(0x7f0000000000), &(0x7f0000000140)=0x4) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 18:25:30 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) write$apparmor_current(r1, &(0x7f0000000040)=@profile={'permprofile ', '$.(\xaa$!\x00'}, 0x13) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:30 executing program 3: setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) 18:25:30 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2515.851719][T25899] binder: 25896:25899 ioctl 541b 0 returned -22 18:25:30 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=""/220, 0xdc, 0x0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x48001002, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f00000002c0)) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) r2 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r2, 0x0, 0x0) 18:25:30 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) (async, rerun: 32) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) (rerun: 32) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) (async) write$apparmor_current(r1, &(0x7f0000000040)=@profile={'permprofile ', '$.(\xaa$!\x00'}, 0x13) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:31 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 18:25:31 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0) [ 2516.025292][T25904] binder: 25901:25904 ioctl 40046205 0 returned -22 18:25:31 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x406881, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000080)={0x8, r2}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000000)={0xc, r2}) 18:25:31 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x20) (async) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2516.160578][T25913] binder: 25911:25913 ioctl 541b 0 returned -22 18:25:31 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=""/220, 0xdc, 0x0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x48001002, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f00000002c0)) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) socket$rxrpc(0x21, 0x2, 0x2) [ 2516.223333][T25920] binder: 25917:25920 ioctl 541b 0 returned -22 18:25:31 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, r0, {{0x0, 0x101, 0x2, r3}}}, 0x28) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r5, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r6, &(0x7f0000002240)={0x18, 0x0, r7}, 0x18) write$FUSE_ATTR(r6, &(0x7f0000004180)={0x78, 0x0, r0, {0x81, 0xffff, 0x0, {0x0, 0x4, 0x5, 0x4, 0x4, 0x9, 0x2, 0x40, 0x6, 0x0, 0x5, r1, r2, 0x9, 0x8000}}}, 0x78) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:31 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0) 18:25:31 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x20) (async) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:31 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) 18:25:31 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, 0x0, 0x0) recvfrom$rxrpc(r1, &(0x7f0000000100)=""/146, 0x92, 0x9501a64d5caeb9a0, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x81, @local, 0x7}}, 0x24) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000280), 0x4) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f00000001c0)='-\x00', 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="5c7e251140f9f6fac45772378153a3f9585ae6b735fef50f67520190ed3bad960c8c59f3844a9edc55f6d53af349390f"], 0x0, 0x0, 0x0}) [ 2516.401423][T25927] binder: 25926:25927 ioctl 541b 0 returned -22 18:25:31 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0) 18:25:31 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x110, 0x0, &(0x7f0000000580)=[@dead_binder_done, @register_looper, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x7, 0x2, 0x2a}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/5, 0x5, 0x1, 0x26}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000002c0)={0x0, 0x20, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/93, 0x5d, 0x81, 0x29}, @flat=@weak_binder={0x77622a85, 0x10b}}, &(0x7f0000000400)={0x0, 0x18, 0x40}}}, @increfs, @decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/108, 0x6c, 0x0, 0xf}, @flat=@binder={0x73622a85, 0x10b, 0x2}, @fda={0x66646185, 0x3, 0x1, 0x27}}, &(0x7f0000000540)={0x0, 0x28, 0x40}}, 0x400}], 0xae, 0x0, &(0x7f0000000800)="51eadac1c7db864e165febc050126c44e2351f17604d665cb9daa34bbf55b2e64844e132b7b9411206e1358638aee5dd64df7a1d94dedc509f47f13087ffc8c692a5cb6787f5922a23f92224305d4bf5bb701b1d38b7967efb02181435ca8c1553f63c06b0502d6d60e76e59c4f85ce977a98b8d8e497cd3d531748d6bbe0df3df1d6a6cf845db01dbd10497edde66d4bbfa7a1203a0919961a1b180d0cc043dbae1bcd03bf0a39b3cd74c0b858f"}) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000000)="ccc3c94d9d20e82a00275de9ea4354ffd817269722b724115f86", 0x1a) 18:25:31 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, r0, {{0x0, 0x101, 0x2, r3}}}, 0x28) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r5, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r6, &(0x7f0000002240)={0x18, 0x0, r7}, 0x18) write$FUSE_ATTR(r6, &(0x7f0000004180)={0x78, 0x0, r0, {0x81, 0xffff, 0x0, {0x0, 0x4, 0x5, 0x4, 0x4, 0x9, 0x2, 0x40, 0x6, 0x0, 0x5, r1, r2, 0x9, 0x8000}}}, 0x78) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (rerun: 32) [ 2516.472048][T25935] binder: 25932:25935 unknown command 287669852 18:25:31 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=""/220, 0xdc, 0x0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x48001002, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f00000002c0)) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) [ 2516.519750][T25935] binder: 25932:25935 ioctl c0306201 20000000 returned -22 18:25:31 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000100)={0x0, 0x7, 0x9, 0x2c63, 0x80000000, 0x40}) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, 0x0) r3 = landlock_create_ruleset(&(0x7f0000001280)={0x2200}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000000)={0x200, r3}, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000000)) 18:25:31 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, 0x0, 0x0) recvfrom$rxrpc(r1, &(0x7f0000000100)=""/146, 0x92, 0x9501a64d5caeb9a0, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x81, @local, 0x7}}, 0x24) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000280), 0x4) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f00000001c0)='-\x00', 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="5c7e251140f9f6fac45772378153a3f9585ae6b735fef50f67520190ed3bad960c8c59f3844a9edc55f6d53af349390f"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) connect$rxrpc(r1, 0x0, 0x0) (async) recvfrom$rxrpc(r1, &(0x7f0000000100)=""/146, 0x92, 0x9501a64d5caeb9a0, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x81, @local, 0x7}}, 0x24) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800}) (async) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000280), 0x4) (async) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f00000001c0)='-\x00', 0x2) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="5c7e251140f9f6fac45772378153a3f9585ae6b735fef50f67520190ed3bad960c8c59f3844a9edc55f6d53af349390f"], 0x0, 0x0, 0x0}) (async) 18:25:31 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7fffffffffffffff, 0x10000) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:31 executing program 3: socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) 18:25:31 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, r0, {{0x0, 0x101, 0x2, r3}}}, 0x28) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r5, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r6, &(0x7f0000002240)={0x18, 0x0, r7}, 0x18) write$FUSE_ATTR(r6, &(0x7f0000004180)={0x78, 0x0, r0, {0x81, 0xffff, 0x0, {0x0, 0x4, 0x5, 0x4, 0x4, 0x9, 0x2, 0x40, 0x6, 0x0, 0x5, r1, r2, 0x9, 0x8000}}}, 0x78) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) (async) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, r0, {{0x0, 0x101, 0x2, r3}}}, 0x28) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) read$FUSE(r5, &(0x7f0000004200)={0x2020}, 0x2020) (async) write$FUSE_LSEEK(r6, &(0x7f0000002240)={0x18, 0x0, r7}, 0x18) (async) write$FUSE_ATTR(r6, &(0x7f0000004180)={0x78, 0x0, r0, {0x81, 0xffff, 0x0, {0x0, 0x4, 0x5, 0x4, 0x4, 0x9, 0x2, 0x40, 0x6, 0x0, 0x5, r1, r2, 0x9, 0x8000}}}, 0x78) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) [ 2516.778209][T25949] binder: 25947:25949 ioctl 541b 0 returned -22 [ 2516.814450][T25952] binder: 25951:25952 unknown command 287669852 18:25:31 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000100)={0x0, 0x7, 0x9, 0x2c63, 0x80000000, 0x40}) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, 0x0) r3 = landlock_create_ruleset(&(0x7f0000001280)={0x2200}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000000)={0x200, r3}, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], 0x1}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000100)={0x0, 0x7, 0x9, 0x2c63, 0x80000000, 0x40}) (async) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, 0x0) (async) landlock_create_ruleset(&(0x7f0000001280)={0x2200}, 0x10, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000000)={0x200, r3}, 0x0) (async) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000000)) (async) 18:25:31 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=""/220, 0xdc, 0x0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x48001002, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f00000002c0)) [ 2516.843854][T25952] binder: 25951:25952 ioctl c0306201 20000000 returned -22 [ 2516.897288][T25956] binder: 25951:25956 unknown command 287669852 18:25:31 executing program 3: socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) 18:25:31 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x90, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x2, 0x0, 0x39}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/28, 0x1c, 0x2, 0x4}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x20, 0x48}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@weak_handle={0x77682a85, 0x101, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/66, 0x42, 0x2, 0x6}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}], 0xb9, 0x0, &(0x7f0000000380)="f99c4153137facea0e2a99e9c2b92735a86ca14ce13482de3c7b74867a692f7e11ccc275d4b4070de603089316488c311b7c5185693892a340f52140c24faf908cda4b1b4f76cfc228dc3ab738940dd3d526e998fb8b1ae36f0ad5358c3cf49beb8519817fbf7524db87cb99f9f4582e9208a70d0f7367158e882857190dfa23535e299d9122768e2204bc66b658fd7513ea0bfcf991742f1d777f37857839328a6bda4f5718b702fd19e936c4674ac0d93adb26c676e9bf4a"}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000480)={{0x0, 0x1}, {0x3, 0x40}, 0x1, 0x1, 0x2}) [ 2516.942626][T25956] binder: 25951:25956 ioctl c0306201 20000000 returned -22 18:25:31 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async, rerun: 32) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000100)={0x0, 0x7, 0x9, 0x2c63, 0x80000000, 0x40}) (async, rerun: 32) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, 0x0) (rerun: 32) r3 = landlock_create_ruleset(&(0x7f0000001280)={0x2200}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000000)={0x200, r3}, 0x0) (async) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000000)) 18:25:32 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, 0x0, 0x0) recvfrom$rxrpc(r1, &(0x7f0000000100)=""/146, 0x92, 0x9501a64d5caeb9a0, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x81, @local, 0x7}}, 0x24) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000280), 0x4) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f00000001c0)='-\x00', 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="5c7e251140f9f6fac45772378153a3f9585ae6b735fef50f67520190ed3bad960c8c59f3844a9edc55f6d53af349390f"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) connect$rxrpc(r1, 0x0, 0x0) (async) recvfrom$rxrpc(r1, &(0x7f0000000100)=""/146, 0x92, 0x9501a64d5caeb9a0, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x81, @local, 0x7}}, 0x24) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800}) (async) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000280), 0x4) (async) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f00000001c0)='-\x00', 0x2) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="5c7e251140f9f6fac45772378153a3f9585ae6b735fef50f67520190ed3bad960c8c59f3844a9edc55f6d53af349390f"], 0x0, 0x0, 0x0}) (async) [ 2517.032978][T25971] binder: 25966:25971 ioctl 541b 0 returned -22 18:25:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=""/220, 0xdc, 0x0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x48001002, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 18:25:32 executing program 3: socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) 18:25:32 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000002400), 0x3d67, 0x8600) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000002440)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000022c0)={0x3, 0x0, &(0x7f0000002280)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000002340)={0x5, 0x0, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, r2, r3, 0x0, 0x0, 0x0], 0x7, 0x1000, 0x0, 0xffffffffffffffff}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f00000000c0)=0x2, 0x4) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_BMAP(r5, &(0x7f0000000140)={0x18, 0xffffffffffffffda, 0x0, {0x7}}, 0x18) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000002540)={0x1, 0x6d}, 0x2) write$FUSE_LSEEK(r8, &(0x7f0000002240)={0x18, 0xfffffffffffffff5, r9}, 0x18) write$FUSE_IOCTL(r6, &(0x7f00000001c0)={0x20, 0x0, r9, {0x200, 0x0, 0x92, 0x20}}, 0x20) r12 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r13 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r12, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r13, &(0x7f0000002240)={0x18, 0x0, r14}, 0x18) write$FUSE_ATTR(r12, &(0x7f0000002580)={0x78, 0x0, r9, {0x30000000, 0x5, 0x0, {0x6, 0x0, 0xfffffffffffffffe, 0xffffffffffffff06, 0x6, 0xe, 0x4, 0x8001, 0x4, 0x4000, 0x5, r10, r11, 0x1}}}, 0x78) write$FUSE_INIT(r6, &(0x7f0000002380)={0x50, 0x0, r14, {0x7, 0x27, 0x401, 0x1850002, 0x2, 0x1, 0x8000, 0x7f}}, 0x50) r15 = openat$cuse(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0) r16 = getegid() r17 = geteuid() read$FUSE(r13, &(0x7f0000008700)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f000000a740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f000000c780)=ANY=[@ANYBLOB="9002000000000000", @ANYRES64=0x0, @ANYBLOB="01000000000000000000000000000000ff0000000000000000080000000000000004000000000000060000fc00000000000000000000000000000100000000000500000000000000ff0100000000000000010000000000005c0c000005000000050000000000000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03000000030000000000000003000000000000001f000000000000000a000000010001002f6465762f63757365000000000000000600000000000000030000000000000003000000000000000700000000000000080000000101000005000000000000002af2376700000000b100000000000000010000000000000003000000000000000500000000000000a1db000080000000001000000080000006000000", @ANYRES32=0x0, @ANYRES32=r16, @ANYBLOB="03000000ff070000000000000200000000000000040000000000000001000000090000000000000000000000000000000000000000000000000000001575000000000000000000000000000102000000c38f00000500000000000000070000000000000000000000000000000104000000000000020000000000000004000000000000001f00000002000000000100000020000048340000", @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB="04000000000000000000000004000000000000000600000000000000000000000500000004000000000000000000000000000000c0ffffffffffffff090000000000000000020000000000080000000000000000f10000000000000000000000000000800800000000000000917e00000000000001000000000000800200000005000000010000000020000001000000", @ANYRES32=r10, @ANYRES32=r19, @ANYBLOB="04000000dc540000000000000200000000000000200000000000000001000000faffffff2f00000000000000"], 0x290) write$FUSE_LSEEK(r15, &(0x7f0000002500)={0x18, 0x0, r9, {0xffffffffffffffae}}, 0x18) [ 2517.182176][T25980] binder: 25978:25980 unknown command 287669852 18:25:32 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x105000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000006c0)={0x101}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x20880) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000100)={0x80, 0x1, {0x1, 0x2, 0x38, 0x3, 0xb5}, 0x6}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x114, r2, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x25, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x62}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x114}, 0x1, 0x0, 0x0, 0x8090}, 0x1) r3 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, 0x0) r4 = mmap$binder(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x1, 0x11, r1, 0x5) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r4}], 0x38, 0x0, &(0x7f0000000040)="dbf55760cb61759a3ea57891a66a5e13ddbd2775c68dd1f29c44d122bb2b7ad1a3b02d182f2f72746412e36b8bbfcb03b2649bfeeb2b6d2d"}) [ 2517.230991][T25983] binder: 25982:25983 ioctl 541b 0 returned -22 [ 2517.247223][T25985] binder: 25978:25985 unknown command 287669852 [ 2517.257656][T25985] binder: 25978:25985 ioctl c0306201 20000000 returned -22 [ 2517.272902][T25980] binder: 25978:25980 ioctl c0306201 20000000 returned -22 18:25:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=""/220, 0xdc, 0x0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x48001002, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) [ 2517.380003][T25990] binder: 25988:25990 ioctl 541b 0 returned -22 [ 2517.409234][T25992] binder: 25989:25992 ioctl 541b 0 returned -22 18:25:32 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x6440, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000480)="efbd57c66529645dc8f650d2d545a37c9afa6b", &(0x7f00000007c0)=@buf="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"}, 0x20) ioctl$PTP_PIN_GETFUNC(r2, 0xc0603d06, &(0x7f0000000740)) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000000140)) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000100)={{0x1000, 0x101}, {0x1, 0xff}, 0xfffffffc}) 18:25:32 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000002280)={0x2}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r4, &(0x7f0000002240)={0x18, 0x0, r5}, 0x18) write$FUSE_IOCTL(r2, &(0x7f0000000040)={0x20, 0x0, r5, {0xfffffffb, 0x4, 0x4, 0xb408}}, 0x20) connect$rxrpc(r1, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r7, &(0x7f0000002240)={0x18, 0x0, r8}, 0x18) write$FUSE_INTERRUPT(r7, &(0x7f00000000c0)={0x10, 0x0, r5}, 0x10) 18:25:32 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06"], 0x0, 0x0, 0x0}) 18:25:32 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=""/220, 0xdc, 0x0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x48001002, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 18:25:32 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x105000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000006c0)={0x101}) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x20880) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000100)={0x80, 0x1, {0x1, 0x2, 0x38, 0x3, 0xb5}, 0x6}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x114, r2, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x25, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x62}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x114}, 0x1, 0x0, 0x0, 0x8090}, 0x1) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, 0x0) r4 = mmap$binder(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x1, 0x11, r1, 0x5) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r4}], 0x38, 0x0, &(0x7f0000000040)="dbf55760cb61759a3ea57891a66a5e13ddbd2775c68dd1f29c44d122bb2b7ad1a3b02d182f2f72746412e36b8bbfcb03b2649bfeeb2b6d2d"}) 18:25:32 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r4, &(0x7f0000002240)={0x18, 0x0, r5}, 0x18) write$FUSE_INTERRUPT(r1, &(0x7f0000000300)={0x10, 0x0, r5}, 0x10) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x1800, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000002c0)={r6}) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x8}, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r7 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r7, &(0x7f0000000100)="3601807ec86331db6ccecbb146b845dd9a41c0bc59d1c75d5a5288c331f04e1b7aed7872786bf877f6a0335086fc4a20b47bcb4a7240ee25b8ea2fdc3230f3ea0b1f70bfb0b89886142fa953d7e9932ce1d4dc857a218a0053561cba08b4a37815cfc732fdc0a3e7afe821f81488625a2ab791af2c70d7020418b2ca009d49240d45a455aa77a35e32a065e42c1ab514772ff389188ec8bb451040ac49fce8d856", &(0x7f00000001c0)=@udp=r1, 0x4}, 0x20) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r8, 0x402c5342, &(0x7f0000000380)={0x2, 0x1d, 0x400, {0xfffffffb, 0x8}, 0x200, 0xfff}) [ 2517.854231][T26003] binder: 25998:26003 ioctl 541b 0 returned -22 [ 2517.876927][T26002] binder: 25995:26002 unknown command 6 18:25:32 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=""/220, 0xdc, 0x0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) fanotify_mark(0xffffffffffffffff, 0x80, 0x48001002, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 18:25:32 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x6440, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000480)="efbd57c66529645dc8f650d2d545a37c9afa6b", &(0x7f00000007c0)=@buf="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"}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000480)="efbd57c66529645dc8f650d2d545a37c9afa6b", &(0x7f00000007c0)=@buf="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"}, 0x20) ioctl$PTP_PIN_GETFUNC(r2, 0xc0603d06, &(0x7f0000000740)) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000000140)) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000100)={{0x1000, 0x101}, {0x1, 0xff}, 0xfffffffc}) [ 2517.900514][T26002] binder: 25995:26002 ioctl c0306201 20000000 returned -22 18:25:32 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:32 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x105000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000006c0)={0x101}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x20880) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000100)={0x80, 0x1, {0x1, 0x2, 0x38, 0x3, 0xb5}, 0x6}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x114, r2, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x25, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x62}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x114}, 0x1, 0x0, 0x0, 0x8090}, 0x1) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, 0x0) (async) r4 = mmap$binder(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x1, 0x11, r1, 0x5) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r4}], 0x38, 0x0, &(0x7f0000000040)="dbf55760cb61759a3ea57891a66a5e13ddbd2775c68dd1f29c44d122bb2b7ad1a3b02d182f2f72746412e36b8bbfcb03b2649bfeeb2b6d2d"}) 18:25:32 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:33 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) (async) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r4, &(0x7f0000002240)={0x18, 0x0, r5}, 0x18) (async) write$FUSE_INTERRUPT(r1, &(0x7f0000000300)={0x10, 0x0, r5}, 0x10) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x1800, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000002c0)={r6}) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x8}, 0x2) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) r7 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r7, &(0x7f0000000100)="3601807ec86331db6ccecbb146b845dd9a41c0bc59d1c75d5a5288c331f04e1b7aed7872786bf877f6a0335086fc4a20b47bcb4a7240ee25b8ea2fdc3230f3ea0b1f70bfb0b89886142fa953d7e9932ce1d4dc857a218a0053561cba08b4a37815cfc732fdc0a3e7afe821f81488625a2ab791af2c70d7020418b2ca009d49240d45a455aa77a35e32a065e42c1ab514772ff389188ec8bb451040ac49fce8d856", &(0x7f00000001c0)=@udp=r1, 0x4}, 0x20) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f00000006c0)={0x101}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r8, 0x402c5342, &(0x7f0000000380)={0x2, 0x1d, 0x400, {0xfffffffb, 0x8}, 0x200, 0xfff}) 18:25:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x6440, 0x0) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000480)="efbd57c66529645dc8f650d2d545a37c9afa6b", &(0x7f00000007c0)=@buf="9dd48742f00447d2f076654412cb0850d2fff7c4256983724e93666bfdb0c256ce5ac0f6a7dcb70aa116ecb86a3cc5dc94dec21398f8b78d381789785405fa2b6b5c8dd1c1aab234c4d47c59fcb34b85c1ba32a83932e6edcdf20f0ea361952d8bc26b6176fd113351bcd43eb43c8baba7fa49d6df10244f5e4a6298f30e50883421e2e0031d26688afcfd5bb43034c3cb92c3bd68d9d7284c7956cca5c92e40b3d4bf8a0a402d52153eb90424329398a57958e52d1387d5f19d0c301668bfcfebb7777e71fe31ca0e90ce3b007817b833e8d6a7b919a31224a91753575640559ddc00c113886de92a9a53584bf7fda17fec8b3b9e20ecf4cf6a5e9b642d035719945ce3a89c1bf9f37467d5fe61a3d4071b9787142cd3c6225858bafea499fe852e16bfbf679a60993209fe68ffdb9ccae4d294f331ee3b45f3a8d44cece9085c284a8f5a2214187907667b837350b8e323ca233d07e02a77d0de61130aa9a2ddece1f34e0e2174965100ba5c290ddfd1688c94e2245b3e18dca54dccb88ef7960f76f05bee3f4a5352cad7adcf7da3b0ddbb7157d1b1a85cf62eb1ff71b7f070b9ed1dbd58688ca7e3287d7378cf975aff51eba63064d8bdcb0a2fdb8b2373dcfbdbce89caef15fb6913edd9fa5742288b8f43950790040ccab749b70cf127a0b60468113daf19a3deaa8e39b8311684626bfa4f87569511bb8d7b15513e86cfaaf4d47e6ce6eec0a54cc504e1849466cb8ece00f2d2b40c281ed9f4c6b40dfb380b5d98905f83a4592769dec92f9701bfe0ca8df52e26bd925091ad6c14222054025f92d717012b024a6f39755146d053791d649fc591b2737310cc4744ed8d6b66ba2885d9d1a1dc15f02c1b5b7ca1d5b0065cd1817007fdbdfe6b1f80db39915e3370992efd5504950f8a919522d558220ee8127c7862ddcb1edda7fae8ff3daf7d1b0a06767cd8502a654bf778aba261264fa446357eb7f2cbdf08a55b59c661c7e8b864b5949209bf6c6736ca6e26d2bbdfae1a4d5f5d0207fc29828c640a6c9260bc701a000a266b7aebcfbdba64736d41e965fc92faaa4f5867f8e5eb43ec763b7cd96bd3cbc0b1ada9eae3ff278f21e80542d88ccdd5632dc4b06f4bde4a00cc31bce144da631e520c7ee8f6d2e0c5763ca2842cbcac7fbf1e1ecc730281f353fbde58c010ea9c89ab0d940eac90a0807ecce76b8a9dae9c3dcc6bdb2c3621b97f99b9061a497171701b4b0924f27ae7fb4bfc2af9971495c61ae1abb8956f6ef7321ba211fb25fd47bb4abf0c2551655fd574f0fdd9e1fc7399f14b20e77c31fd2af57fc9584e922d5fde0cc961ec85fc357e475a3963350fedd4648c96b0357118dc877f724ef5ece776c3e65a43ec44f67c9139e0d677fa5eccd9e4162eaa1ef86ea02a35afd679cd336a1f7bc4641164cc112fbc26dd31dc4076a78131c6aa760ddfbb771dc727fe53e53c2e92a69f549736defb9c3dd01dc6dfdbf519ebd71a3d41a0bbae5d8506d8fbdb21df085c36c9acfc241b2b44341f9efb3bf20225554662d74ae637f135a32edffcd07aa990f0144d8c00edc731dd3e03800e0d666d8c8db74fa29021d1333669fa36138c33a5e124f43e38267e178414818a0b467ef055526275dec45e1ba08b8322649c1df0aef3a3a9911269db9fc16bb8297d6001773b6d12574dba6944c43d4c1cf78edd68f2d92595d71bec49738489715ecdd65a5d4b667f908b8faa1593f282b6e120d9447ddd6e75c82107221acbdd1a414b8027496a670c1d3425fcf3fe4126975b4b6b491356d162cc71199d97ce6b87e1a4615a2171d4aa88e2d8ced1d60ce0f4c4d18757266d8358194604174a0b55e82a409e6803739b8becb197d5c706257a9b44a7b7d8e0116ae3686d819b787736d3d2679f07fb01ee8412697ddc6822e8400d26a24d30d621e61a55384d541464bbd4ff39a9d8ab3104ce2468144f3ffa5a621a7d6641901c12806ac768d06d78804542474ab70f75e964daf8c6aecaabad02d12294fd91d11d227ed61e43f5de01988f2c549fa678883062eb36f564cc8c15ea094f24b995967ae5f6cbb5b094f8b2644b96b12324113bed6b85bd5bf8cff271e02d997136483f8401e9b4d28432d56a7b2429c0872d2d737f2ab38f3249590946dd01fd69540d7924fc6b1b1624a4b9db41b6af6f96d306229304e9cf3bdec58f315ea90f1479890342eee9677336207d440de3463f738af05c4187e6220b1615636140747002e041f4c074c5a4d0f37d30a5137c8a5e2cd293004488668ff844d0e43b789606442f27527501a4b82beeca4c83bb5d15adfcd7a1ec4b43b7713d0ac79f8a0cfae710402f8d819a151178026d1a8bf7336072239e9a1974a5616e8b7ed7ad702457dc1e1cf42d83f8e80913c9a0bfb11af3f980af33092b8d987df3867ce47b093e7052a482f184dcb77b2b2058f0ff91b1f982ff5b92b8ecf09d7214c9a73893c6f9b104aeb04a32674fa58bb512c1cb62e99e07a48077d57efb8d8e05604998e69dfc8bb4066eb66c6094976b422d9259951c8a498409feca4fb25ca3f9e21b5c788160da442c87454420bcee5324a76b0bba240fc3acf0148ef30c2eeb69593e670b9e8c080e6c757e2280956671630121688b1bc030ede44a4e9372859528f6fb3d1be1e9eac1b16a197b6c1d5164d71a3c074639d32b10515b4da59c02622df8072c8a168be11f74b1a5528b3ca3cfaf1665a928c542ccea5814d8fdf465b5fceb9ad56decdc4468698d6d5bc0d9a133454004353aaa9b363aeaea87da0652404d9514efde2bc642569fb781b2a07253bf919edc549f591dbcbb3d6a70695819caf078dcd7fb333a558189b20c138c8da77baf5bb31c55fb4c365dd33440a2812d93e5a5190701d39a33078d90ac841c926157401b59c0bc854d2d02bd1389254bcd1f41366d4a6001d580b435d086e136dc59a9369d6872dd91f33693a9a955bf8ca84198166c39b8b3945c19ddd8691a9ad0d56117b253801feaea73ea88fd8d84a24064e9c82500fe0209589b4b89ff26ea1dc8af50e2c8c28a8196db671a08256eb970f3a9545e3f94e5108c5389398e13ad21a1f782d6f21ac28e1ce5c36f8b2a4df9b8c0fd906c90635c203749fc30233bfce520154ca40604610409c885ba42a8ed65986582bda5489c88032ae23ae057a74f69d009f529c47b9ab1b2824d1239f266175c8ad747359ed1dc7cb7640aed813869bfb92c2ffad763efaaa99ba833539b2568c5edf60eed28392230609d1133b285f55917188397cf1cd6c11552dc1dd2d4ebddde3d2c946e0d0c25a75fd82e260bbc74ca7db948fcc938e5e48da3dc9ded0efe93a4b502f593475c640c20161611fac7bd14ddf5ff7ad5f4cfa13f8cce7846ebeb62187ccc80a488d608ab3e2f397b82a3f8e424b513cceada6b16a40df4719fb716ae2902e6213e17e81aaa84829c618d2afd3e4ff45e27c5972219972019036c588b26903e4d4f8b4b5a3add020f9103f1268b521c7565dd1a0efcad4f3a90b9c25868391e45d0ccf415d4feb6f4b3285aa8aaca800a576d516c39c6c41a765c8166674b49c8172b75d77bbf51707063d43b9b54cdc7168cd1f6c9c5a1d34d2788efd4799735ebaed1e3ddeed15f52af74d015406887b744507b3df9f4db941198cb230922dc675ff2a77b76f091a71a48ae96ed88d8fc9d8337d36261603efe7c89ccd48970b4954040c031993a445b66d9f5a477c0db420a252818e9ac2dcf4ba489791b0d364c10bc984c8afd9318ee1f2b06f2cb71a7183f19888f3a5102582db4aa9749a94384a1b40d80d20392eda958d258a6aee759803117bd3a50f5e943da17b80ff9f89bf839cbeba039ed56cb76ae8ecbd2f1cbb0440303030d930c4ac2d6db1c9c4ffae2bd4d9018fc1b3a5833d053276b3e8565097d521533470d6b34fd53b9996b1a730e30499b0c901f0f834d0fb95342786e8f3bbce1dc01c6315cd29dcaf83ac8cedbeadbee77532beaf4dd421cf02d56be497554541df8f71158186b4ac1989cf7cba6cafed0bed51465d5bba4297999e40e93d27b68ee50e77f72693f3c068a046f3d211a8c6ef854edbc7e330c5dc893dce59a5e273a6a54012fc7a72078533dd7ad0d43c44652e274a54fdd2289282d8f6d3868dcd145838e39121772d180476624440404cfbca0297ee37d2e37e7603fa21b7f65a747ef9feb1ab50bba076f97421185f764d2de4255ecacdf9a3728c7b112d68c9b05d398f65317a2db9d09df7d7f85a6067831ffd6a3c5f607669ff0b1be2fcf13ca635b19f2923f535930e98b19b4a35e454cba295c7a7f308d330a2e494d07641c45a0c19b5e459f9cb34c924a4de4ce275183784802a81248c57c2b246ba739ac9423122312e8e4422bbd006a077d78a0a2dbd923c3b71304d6be90c0405b51243d60af9dd3cf9e5014a35f0343de3c2aeb3b4d3a80cc0efd54ca11106f41155ecccd84f16ae1dd40a582ae45ed0e9c0b7f946ab67fec71f49037cc89a2555c1176eb9681b73c1430a4a47ffedf83247fdb7016110eb4f60853a9c785830381598974b3ee97136e77a792d9dc60dbcb803d9417abf5f715e0308781ef3f5443095c585e6223f8ef57d07452afa6ef7abb31d98ac2c5bfba1ab6926fb8d188fe332ddc97204c097aa91aad7083c1c2bdbd2235b3c0a07998d48a47a7c569a98ca21f64723855721b29c7fff5ce833a5e3092f42f8c6d501050e0b64f9558e1f118e9285f95e452a2f405120c432186e192df64773a8e516e4a4ca80f159e4f8be3d5a02e92bd2ed2861207072bccd07a61a78a6f69f015480de0506040df44a46e86bed91832ba95ddd93ea5ff88c26cff52aa0fa1e297389c891bd70363e506ae649800b478178968c03601cb5a602a70774ba73baa30d6f83e3876fa67ced30cff4dd9564e153ffa7791cbe111f1fcd64646f3e7faf4dc02548d2c37049a451f826c5bbfcc6d4a53b8de95c5b385a7257d01a73b84ac211de63eadba8b7734fd496aeca135963f0280dbd774bda0459f5dabbf144e83f0dae8bcc8efe9690aac5d0d5068cb5b81086ccd582cbdce7c6be474501f17f0aa43f17911cc5a1e4032c88947462e48ed1a2f5e36d53c5e592318bfcb258becb842e4b7d13b13345145edf9570979e1aa9f33d7c2c4b9fc94d79efffca911eebc06904050543230edc0026825ceae90b2fb5a739bae25ad6cf6f2ff06dcc045025a59046311a6c16f012365cd2189c7da64598986de80dc86a8893dbbc36c8b1b602650f64226ac8468d127e87a0b4981ea9c9d3bb9d8a4f8be484d8859235c1294c489a23a23274fc8a3ca385dc9d834828502d31946a1a6c4b4ec23daac3d61da8a8567371a10971d1114835f7899ddc6c1653c8c3db0f60f6e607bfb562b9e93ab48605a773ff9ce13119a5627bdfb976cc19928cab5ea474174b94560e13cb18fedbc988000d7d8c343d7741807487bb84329b7bbd4d9720c534b0d05e963a4ac9f17075d3b9287ffafdf182e0595d3ef553b93fed0f1737aa1baf88311b635e6da9d2c6d459eb43b1038521c2c188305860ed38f91607fb531f5931fbfe092b2a909f38f17c6561e5194eb2e623a086d6548849888534f659a9f5b73f811260d699f242e0cbf5c48b8cf79f23e122e672e7bc213a10d2bf34090d9905357623afcde1bfe7d127f7c2165bb14b83aecd36a882afd9026a273b36b1af50174be9d5c0536ff4c4f0a5db4a19cf135a621118c50c29745810e68"}, 0x20) (async) ioctl$PTP_PIN_GETFUNC(r2, 0xc0603d06, &(0x7f0000000740)) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000000140)) (async) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000100)={{0x1000, 0x101}, {0x1, 0xff}, 0xfffffffc}) 18:25:33 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x48001002, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 18:25:33 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000040)=[@request_death={0x400c630e, 0x2}], 0x60, 0x0, 0x0}) 18:25:33 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}, @register_looper, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000100)) 18:25:33 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) (async, rerun: 32) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) (rerun: 32) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) (async) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r4, &(0x7f0000002240)={0x18, 0x0, r5}, 0x18) (async) write$FUSE_INTERRUPT(r1, &(0x7f0000000300)={0x10, 0x0, r5}, 0x10) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x1800, 0x0}) (rerun: 64) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000002c0)={r6}) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x8}, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r7 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r7, &(0x7f0000000100)="3601807ec86331db6ccecbb146b845dd9a41c0bc59d1c75d5a5288c331f04e1b7aed7872786bf877f6a0335086fc4a20b47bcb4a7240ee25b8ea2fdc3230f3ea0b1f70bfb0b89886142fa953d7e9932ce1d4dc857a218a0053561cba08b4a37815cfc732fdc0a3e7afe821f81488625a2ab791af2c70d7020418b2ca009d49240d45a455aa77a35e32a065e42c1ab514772ff389188ec8bb451040ac49fce8d856", &(0x7f00000001c0)=@udp=r1, 0x4}, 0x20) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f00000006c0)={0x101}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r8, 0x402c5342, &(0x7f0000000380)={0x2, 0x1d, 0x400, {0xfffffffb, 0x8}, 0x200, 0xfff}) 18:25:33 executing program 5: fanotify_mark(0xffffffffffffffff, 0x80, 0x48001002, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 18:25:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b) [ 2518.357615][T26030] binder: 26027:26030 ioctl c0306201 20000000 returned -14 18:25:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x1) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040140}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x2c, r2, 0x207, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="07000000726b30205817b2c7ff218e2b4cafb70bf0bbacfd5415ebdfe4bc6538cf31a020d233a6736fb7dd09fb814e52e37a226e89ac1b92c5eadddca86ea34f355de4c836f833e932ddbebe0877365317955cc97f4e27d49d8fb3124cc490b9253d727e9a6996866f5ff0d22ef7bc3e3cf0ddaf5de63146350948f91fbf5840d018ca29da8c17ace0519c93a8475af16f54ac5856eec76e05c9c74654c04fede69a0c36346bcbe83f0000000000", @ANYRES16=r2, @ANYBLOB="000126bd7000ffdbdf250d000000140003800500080001000000060007004e2200000800060082000000"], 0x30}, 0x1, 0x0, 0x0, 0x80050}, 0x44014) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:33 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000004140)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffff5}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2358e219168f52ac, 0x0) 18:25:33 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}, @register_looper, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000100)) 18:25:33 executing program 5: fanotify_mark(0xffffffffffffffff, 0x0, 0x48001002, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 18:25:33 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 18:25:33 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1363044000000000"], 0x0, 0x0, 0x0}) 18:25:33 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2518.658990][T26043] binder: 26042:26043 ioctl 541b 0 returned -22 18:25:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x1) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040140}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x2c, r2, 0x207, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="07000000726b30205817b2c7ff218e2b4cafb70bf0bbacfd5415ebdfe4bc6538cf31a020d233a6736fb7dd09fb814e52e37a226e89ac1b92c5eadddca86ea34f355de4c836f833e932ddbebe0877365317955cc97f4e27d49d8fb3124cc490b9253d727e9a6996866f5ff0d22ef7bc3e3cf0ddaf5de63146350948f91fbf5840d018ca29da8c17ace0519c93a8475af16f54ac5856eec76e05c9c74654c04fede69a0c36346bcbe83f0000000000", @ANYRES16=r2, @ANYBLOB="000126bd7000ffdbdf250d000000140003800500080001000000060007004e2200000800060082000000"], 0x30}, 0x1, 0x0, 0x0, 0x80050}, 0x44014) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:33 executing program 5: fanotify_mark(0xffffffffffffffff, 0x0, 0x48001002, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 18:25:33 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 18:25:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x1) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040140}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x2c, r2, 0x207, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x2c}}, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="07000000726b30205817b2c7ff218e2b4cafb70bf0bbacfd5415ebdfe4bc6538cf31a020d233a6736fb7dd09fb814e52e37a226e89ac1b92c5eadddca86ea34f355de4c836f833e932ddbebe0877365317955cc97f4e27d49d8fb3124cc490b9253d727e9a6996866f5ff0d22ef7bc3e3cf0ddaf5de63146350948f91fbf5840d018ca29da8c17ace0519c93a8475af16f54ac5856eec76e05c9c74654c04fede69a0c36346bcbe83f0000000000", @ANYRES16=r2, @ANYBLOB="000126bd7000ffdbdf250d000000140003800500080001000000060007004e2200000800060082000000"], 0x30}, 0x1, 0x0, 0x0, 0x80050}, 0x44014) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2518.877393][T26061] binder: 26056:26061 unknown command 1074029331 18:25:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) (async) write$6lowpan_control(r1, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 18:25:33 executing program 5: fanotify_mark(0xffffffffffffffff, 0x0, 0x48001002, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') [ 2518.925029][T26061] binder: 26056:26061 ioctl c0306201 20000000 returned -22 18:25:33 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1363044000000000"], 0x0, 0x0, 0x0}) [ 2518.981772][T26065] binder: 26064:26065 ioctl 40046205 0 returned -22 [ 2519.115225][T26075] binder: 26072:26075 unknown command 1074029331 [ 2519.136054][T26075] binder: 26072:26075 ioctl c0306201 20000000 returned -22 18:25:34 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:34 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x2, 0x0}) 18:25:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="06630440ecff0000631b42f918eccf454308e5"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) bind$isdn(r1, &(0x7f0000000040)={0x22, 0xff, 0x1f, 0x95, 0x40}, 0x6) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000180)={0x8}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000180)={0x8}) r4 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r6, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f00000002c0)={0x38, 0x8, r4, 0x0, 0xfffffffffffff373, 0xe6, &(0x7f00000001c0)="c48efe6e525367838f2fe38916f6cd63345804fcbdef9fed51db9e65a2a933d4a1a6ac921e948ffcd04962db5087cb38015f4b7af14eb19a36979e49cb1c10ce487c0020e9e3cfd8a316bed8cc51487250f01279492fbe2253f7801ecdc21df788048396b4279c0e663c9c8b4b3d32a54decc0ce03cbff8d76ef3176e26843d0a0d91607cf4d9d0fc76e8e42bdabed77ab65bb793aab18d9908f499285fbb965a191fe759e9a492cc3a729b57a52bb12d879ae4bee597d6787b5246ccd0bba62c8aec9d0e8ec893183497de59bc244d7ed0379de30f3f951e96b7901757bb58239ba5091e9ad", 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000000c0)={0xc}) 18:25:34 executing program 5: fanotify_mark(0xffffffffffffffff, 0x80, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 18:25:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1363044000000000"], 0x0, 0x0, 0x0}) 18:25:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}, @register_looper, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000100)) 18:25:34 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4000) [ 2519.609544][T26084] binder: 26081:26084 unknown command 1074029331 [ 2519.631071][T26084] binder: 26081:26084 ioctl c0306201 20000000 returned -22 18:25:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="06630440ecff0000631b42f918eccf454308e5"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) bind$isdn(r1, &(0x7f0000000040)={0x22, 0xff, 0x1f, 0x95, 0x40}, 0x6) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000180)={0x8}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000180)={0x8}) r4 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r6, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f00000002c0)={0x38, 0x8, r4, 0x0, 0xfffffffffffff373, 0xe6, &(0x7f00000001c0)="c48efe6e525367838f2fe38916f6cd63345804fcbdef9fed51db9e65a2a933d4a1a6ac921e948ffcd04962db5087cb38015f4b7af14eb19a36979e49cb1c10ce487c0020e9e3cfd8a316bed8cc51487250f01279492fbe2253f7801ecdc21df788048396b4279c0e663c9c8b4b3d32a54decc0ce03cbff8d76ef3176e26843d0a0d91607cf4d9d0fc76e8e42bdabed77ab65bb793aab18d9908f499285fbb965a191fe759e9a492cc3a729b57a52bb12d879ae4bee597d6787b5246ccd0bba62c8aec9d0e8ec893183497de59bc244d7ed0379de30f3f951e96b7901757bb58239ba5091e9ad", 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000000c0)={0xc}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="06630440ecff0000631b42f918eccf454308e5"], 0x0, 0x0, 0x0}) (async) syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) (async) bind$isdn(r1, &(0x7f0000000040)={0x22, 0xff, 0x1f, 0x95, 0x40}, 0x6) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000180)={0x8}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000180)={0x8}) (async) syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x0], 0x1, 0x800}) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) (async) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r6, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f00000002c0)={0x38, 0x8, r4, 0x0, 0xfffffffffffff373, 0xe6, &(0x7f00000001c0)="c48efe6e525367838f2fe38916f6cd63345804fcbdef9fed51db9e65a2a933d4a1a6ac921e948ffcd04962db5087cb38015f4b7af14eb19a36979e49cb1c10ce487c0020e9e3cfd8a316bed8cc51487250f01279492fbe2253f7801ecdc21df788048396b4279c0e663c9c8b4b3d32a54decc0ce03cbff8d76ef3176e26843d0a0d91607cf4d9d0fc76e8e42bdabed77ab65bb793aab18d9908f499285fbb965a191fe759e9a492cc3a729b57a52bb12d879ae4bee597d6787b5246ccd0bba62c8aec9d0e8ec893183497de59bc244d7ed0379de30f3f951e96b7901757bb58239ba5091e9ad", 0x1}) (async) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000000c0)={0xc}) (async) 18:25:34 executing program 5: fanotify_mark(0xffffffffffffffff, 0x80, 0x0, 0xffffffffffffff9c, 0x0) 18:25:34 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=[@release], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000002140)={0x18, 0xfffffffffffffffe, r1, {0xfffffff8}}, 0x18) [ 2519.732558][T26089] binder: 26088:26089 ioctl 541b 0 returned -22 18:25:34 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:34 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=[@release], 0x0, 0x0, 0x0}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000002140)={0x18, 0xfffffffffffffffe, r1, {0xfffffff8}}, 0x18) 18:25:34 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0xfdfdffff00000000, 0x0, 0x0}) 18:25:34 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5}, 0x2) 18:25:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="06630440ecff0000631b42f918eccf454308e5"], 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) bind$isdn(r1, &(0x7f0000000040)={0x22, 0xff, 0x1f, 0x95, 0x40}, 0x6) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000180)={0x8}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000180)={0x8}) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r6, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async, rerun: 64) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0) (async, rerun: 64) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f00000002c0)={0x38, 0x8, r4, 0x0, 0xfffffffffffff373, 0xe6, &(0x7f00000001c0)="c48efe6e525367838f2fe38916f6cd63345804fcbdef9fed51db9e65a2a933d4a1a6ac921e948ffcd04962db5087cb38015f4b7af14eb19a36979e49cb1c10ce487c0020e9e3cfd8a316bed8cc51487250f01279492fbe2253f7801ecdc21df788048396b4279c0e663c9c8b4b3d32a54decc0ce03cbff8d76ef3176e26843d0a0d91607cf4d9d0fc76e8e42bdabed77ab65bb793aab18d9908f499285fbb965a191fe759e9a492cc3a729b57a52bb12d879ae4bee597d6787b5246ccd0bba62c8aec9d0e8ec893183497de59bc244d7ed0379de30f3f951e96b7901757bb58239ba5091e9ad", 0x1}) (async) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000000c0)={0xc}) [ 2520.067278][T26110] binder: 26106:26110 ioctl c0306201 20000000 returned -14 [ 2520.101250][T26112] binder: 26111:26112 ioctl 40046205 0 returned -22 18:25:35 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=[@release], 0x0, 0x0, 0x0}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000002140)={0x18, 0xfffffffffffffffe, r1, {0xfffffff8}}, 0x18) 18:25:35 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:35 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x3000000, 0x0, 0x0}) 18:25:35 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440c2, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) ioctl$SNDCTL_TMR_START(r1, 0x5402) connect$rxrpc(r0, 0x0, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000140)={0x1, 0x32}, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000180), 0x800000, 0x0) socket$rxrpc(0x21, 0x2, 0xb05b428b88a021bf) 18:25:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}, @register_looper, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 18:25:35 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1f87) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:35 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1f87) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:35 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000040)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) [ 2520.629784][T26123] binder: 26119:26123 ioctl c0306201 20000000 returned -14 18:25:35 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:35 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440c2, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) ioctl$SNDCTL_TMR_START(r1, 0x5402) connect$rxrpc(r0, 0x0, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000140)={0x1, 0x32}, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000180), 0x800000, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xb05b428b88a021bf) bind$rxrpc(r4, &(0x7f00000000c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) r5 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, &(0x7f0000000040)="62f37fe45192e30b8f07d6d6ab2790f9790f0465b5f0e9718faff64466c62a9e1b5a81a346da65037c257c28fbd2fce487177ba67c4b99c4a68a082343afa5642059", 0x42) 18:25:35 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x40046306, 0x6000000}], 0x0, 0x0, 0x0}) 18:25:35 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1f87) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1f87) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) 18:25:35 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000040)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) 18:25:35 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440c2, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) ioctl$SNDCTL_TMR_START(r1, 0x5402) connect$rxrpc(r0, 0x0, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000140)={0x1, 0x32}, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000180), 0x800000, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xb05b428b88a021bf) bind$rxrpc(r4, &(0x7f00000000c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) r5 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, &(0x7f0000000040)="62f37fe45192e30b8f07d6d6ab2790f9790f0465b5f0e9718faff64466c62a9e1b5a81a346da65037c257c28fbd2fce487177ba67c4b99c4a68a082343afa5642059", 0x42) 18:25:35 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:35 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x35be8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000200)) r3 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, 0x0) syz_io_uring_setup(0x7fe0, &(0x7f0000000280)={0x0, 0x4000c90e, 0x2744fff8fb0fcd54, 0x1, 0x29, 0x0, r3}, &(0x7f0000000380), &(0x7f0000000340)) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf250a00000044000280080006000101000006000b000a000000140001000a01010100000000000000000000000008000400ffffffff140001007f000001000000000000000000000000080004000700000040000280080009000500000008000500000000000800060007000000080006007f000000140001000000000000000000000000000000000006000f00000000004800028006000e004e230000080005000100000014000100fe8000000000000000000000000000aa080008000000000006000e004e24000006000b000200000005000d00010000000c000180080005000100000004000380"], 0xf8}}, 0x8) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f00000003c0)={'\x00', 0x1ff, 0x3, 0xffff7fff}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 2521.107408][T26151] binder: 26150:26151 ioctl 40046205 0 returned -22 18:25:36 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}, @register_looper, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:36 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000280)=0x2, 0x4) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5e52ab672bec2ef2e1ebcd654b9f58000000", @ANYRES16=0x0, @ANYBLOB="20002dbd7000ffdbdf250d000000080006006e0000002400018008000b0073697000060004004e220000080005000400000008000900680000000800060000000000"], 0x48}, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008844) 18:25:36 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000040)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000040)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) (async) 18:25:36 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440c2, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) ioctl$SNDCTL_TMR_START(r1, 0x5402) connect$rxrpc(r0, 0x0, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000140)={0x1, 0x32}, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000180), 0x800000, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xb05b428b88a021bf) bind$rxrpc(r4, &(0x7f00000000c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) r5 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, &(0x7f0000000040)="62f37fe45192e30b8f07d6d6ab2790f9790f0465b5f0e9718faff64466c62a9e1b5a81a346da65037c257c28fbd2fce487177ba67c4b99c4a68a082343afa5642059", 0x42) 18:25:36 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r1, &(0x7f0000002240)={0x18, 0x0, r2}, 0x18) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, r2, {0x0, 0x2}}, 0x20) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:36 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x35be8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000200)) r3 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, 0x0) syz_io_uring_setup(0x7fe0, &(0x7f0000000280)={0x0, 0x4000c90e, 0x2744fff8fb0fcd54, 0x1, 0x29, 0x0, r3}, &(0x7f0000000380), &(0x7f0000000340)) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf250a00000044000280080006000101000006000b000a000000140001000a01010100000000000000000000000008000400ffffffff140001007f000001000000000000000000000000080004000700000040000280080009000500000008000500000000000800060007000000080006007f000000140001000000000000000000000000000000000006000f00000000004800028006000e004e230000080005000100000014000100fe8000000000000000000000000000aa080008000000000006000e004e24000006000b000200000005000d00010000000c000180080005000100000004000380"], 0xf8}}, 0x8) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f00000003c0)={'\x00', 0x1ff, 0x3, 0xffff7fff}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 18:25:36 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x2a62251f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:36 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r1, &(0x7f0000002240)={0x18, 0x0, r2}, 0x18) (async) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, r2, {0x0, 0x2}}, 0x20) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:36 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000280)=0x2, 0x4) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5e52ab672bec2ef2e1ebcd654b9f58000000", @ANYRES16=0x0, @ANYBLOB="20002dbd7000ffdbdf250d000000080006006e0000002400018008000b0073697000060004004e220000080005000400000008000900680000000800060000000000"], 0x48}, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008844) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) setsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000280)=0x2, 0x4) (async) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) (async) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5e52ab672bec2ef2e1ebcd654b9f58000000", @ANYRES16=0x0, @ANYBLOB="20002dbd7000ffdbdf250d000000080006006e0000002400018008000b0073697000060004004e220000080005000400000008000900680000000800060000000000"], 0x48}, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008844) (async) 18:25:36 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440c2, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) ioctl$SNDCTL_TMR_START(r1, 0x5402) connect$rxrpc(r0, 0x0, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000140)={0x1, 0x32}, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000180), 0x800000, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xb05b428b88a021bf) bind$rxrpc(r4, &(0x7f00000000c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) socket$caif_stream(0x25, 0x1, 0x4) [ 2521.670057][T26163] binder: 26160:26163 ioctl 40046205 0 returned -22 18:25:36 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x35be8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000200)) r3 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, 0x0) syz_io_uring_setup(0x7fe0, &(0x7f0000000280)={0x0, 0x4000c90e, 0x2744fff8fb0fcd54, 0x1, 0x29, 0x0, r3}, &(0x7f0000000380), &(0x7f0000000340)) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf250a00000044000280080006000101000006000b000a000000140001000a01010100000000000000000000000008000400ffffffff140001007f000001000000000000000000000000080004000700000040000280080009000500000008000500000000000800060007000000080006007f000000140001000000000000000000000000000000000006000f00000000004800028006000e004e230000080005000100000014000100fe8000000000000000000000000000aa080008000000000006000e004e24000006000b000200000005000d00010000000c000180080005000100000004000380"], 0xf8}}, 0x8) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f00000003c0)={'\x00', 0x1ff, 0x3, 0xffff7fff}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 18:25:36 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) (rerun: 64) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x2a62251f) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) [ 2521.835714][T26175] binder: 26172:26175 ioctl 40046205 0 returned -22 18:25:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}, @register_looper, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:37 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r1, &(0x7f0000002240)={0x18, 0x0, r2}, 0x18) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, r2, {0x0, 0x2}}, 0x20) (async) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, r2, {0x0, 0x2}}, 0x20) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:37 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x35be8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000200)) r2 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, 0x0) syz_io_uring_setup(0x7fe0, &(0x7f0000000280)={0x0, 0x4000c90e, 0x2744fff8fb0fcd54, 0x1, 0x29, 0x0, r2}, &(0x7f0000000380), &(0x7f0000000340)) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf250a00000044000280080006000101000006000b000a000000140001000a01010100000000000000000000000008000400ffffffff140001007f000001000000000000000000000000080004000700000040000280080009000500000008000500000000000800060007000000080006007f000000140001000000000000000000000000000000000006000f00000000004800028006000e004e230000080005000100000014000100fe8000000000000000000000000000aa080008000000000006000e004e24000006000b000200000005000d00010000000c000180080005000100000004000380"], 0xf8}}, 0x8) ioctl$PTP_PIN_SETFUNC2(r2, 0x40603d10, &(0x7f00000003c0)={'\x00', 0x1ff, 0x3, 0xffff7fff}) 18:25:37 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000280)=0x2, 0x4) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5e52ab672bec2ef2e1ebcd654b9f58000000", @ANYRES16=0x0, @ANYBLOB="20002dbd7000ffdbdf250d000000080006006e0000002400018008000b0073697000060004004e220000080005000400000008000900680000000800060000000000"], 0x48}, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008844) 18:25:37 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440c2, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) ioctl$SNDCTL_TMR_START(r1, 0x5402) connect$rxrpc(r0, 0x0, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000140)={0x1, 0x32}, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000180), 0x800000, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xb05b428b88a021bf) bind$rxrpc(r4, &(0x7f00000000c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) 18:25:37 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x2a62251f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:37 executing program 2: getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f09ddfbf77467a649e71d1969f2459523bb51a6b4123b55fcf51fbf6841579e0c4f27dd0fcf7226dfbb2f2bdce9a0432ace9865fe6ff51851e0a6305937c2099"], 0x0, 0x0, 0x0}) 18:25:37 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000100)) 18:25:37 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x35be8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000200)) r2 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, 0x0) syz_io_uring_setup(0x7fe0, &(0x7f0000000280)={0x0, 0x4000c90e, 0x2744fff8fb0fcd54, 0x1, 0x29, 0x0, r2}, &(0x7f0000000380), &(0x7f0000000340)) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf250a00000044000280080006000101000006000b000a000000140001000a01010100000000000000000000000008000400ffffffff140001007f000001000000000000000000000000080004000700000040000280080009000500000008000500000000000800060007000000080006007f000000140001000000000000000000000000000000000006000f00000000004800028006000e004e230000080005000100000014000100fe8000000000000000000000000000aa080008000000000006000e004e24000006000b000200000005000d00010000000c000180080005000100000004000380"], 0xf8}}, 0x8) 18:25:37 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) r1 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x3000002, 0x4000010, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000000)="d5b310b954ddd87e229de864bf3b6f34ea5058f4efd95f32", 0x0, 0x18) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000000c0)=0xffffffffffffffff) 18:25:37 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440c2, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) ioctl$SNDCTL_TMR_START(r1, 0x5402) connect$rxrpc(r0, 0x0, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000140)={0x1, 0x32}, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000180), 0x800000, 0x0) socket$rxrpc(0x21, 0x2, 0xb05b428b88a021bf) 18:25:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}, @register_looper, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:37 executing program 2: getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f09ddfbf77467a649e71d1969f2459523bb51a6b4123b55fcf51fbf6841579e0c4f27dd0fcf7226dfbb2f2bdce9a0432ace9865fe6ff51851e0a6305937c2099"], 0x0, 0x0, 0x0}) 18:25:37 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000100)) 18:25:37 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) r1 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x3000002, 0x4000010, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000000)="d5b310b954ddd87e229de864bf3b6f34ea5058f4efd95f32", 0x0, 0x18) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000000c0)=0xffffffffffffffff) 18:25:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}, @register_looper, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:37 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x35be8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000200)) r2 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, 0x0) syz_io_uring_setup(0x7fe0, &(0x7f0000000280)={0x0, 0x4000c90e, 0x2744fff8fb0fcd54, 0x1, 0x29, 0x0, r2}, &(0x7f0000000380), &(0x7f0000000340)) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x1) 18:25:37 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440c2, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) ioctl$SNDCTL_TMR_START(r1, 0x5402) connect$rxrpc(r0, 0x0, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000140)={0x1, 0x32}, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000180), 0x800000, 0x0) 18:25:37 executing program 2: getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f09ddfbf77467a649e71d1969f2459523bb51a6b4123b55fcf51fbf6841579e0c4f27dd0fcf7226dfbb2f2bdce9a0432ace9865fe6ff51851e0a6305937c2099"], 0x0, 0x0, 0x0}) 18:25:37 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000100)) 18:25:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) r1 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x3000002, 0x4000010, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000000)="d5b310b954ddd87e229de864bf3b6f34ea5058f4efd95f32", 0x0, 0x18) (async) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000000c0)=0xffffffffffffffff) 18:25:38 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000011c0)={0x4c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}, @register_looper, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:38 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440c2, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) ioctl$SNDCTL_TMR_START(r1, 0x5402) connect$rxrpc(r0, 0x0, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000140)={0x1, 0x32}, 0x2) 18:25:38 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x35be8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000200)) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) syz_io_uring_setup(0x7fe0, &(0x7f0000000280)={0x0, 0x4000c90e, 0x2744fff8fb0fcd54, 0x1, 0x29, 0x0, r1}, &(0x7f0000000380), &(0x7f0000000340)) 18:25:38 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) 18:25:38 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06f8ff4800000000"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0xb01580) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000380)={{&(0x7f0000000300)={'Accelerator\x00', {&(0x7f00000001c0)=@adf_dec={@format={'Cy', '5', 'RingTx\x00'}, {0x40}, {&(0x7f0000000100)=@adf_str={@normal='NumberDcInstances\x00', {"02ed933fe18c09110e6c498d2909be04355b1b76d81b348402e4268e28cb7021a879478f4a761dcddb7c961b0dfc8bfb286f0d2956836b8e8fa3814f80767009"}}}}}, {&(0x7f0000000280)={'Accelerator1\x00'}}}}, 0xfb}) 18:25:38 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000011c0)={0x4c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}, @register_looper, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2523.342713][T26238] binder: 26236:26238 unknown command 1224734726 [ 2523.365373][T26238] binder: 26236:26238 ioctl c0306201 20000000 returned -22 18:25:38 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) 18:25:38 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x35be8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000200)) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) syz_io_uring_setup(0x7fe0, &(0x7f0000000280)={0x0, 0x4000c90e, 0x2744fff8fb0fcd54, 0x1, 0x29, 0x0, r1}, &(0x7f0000000380), &(0x7f0000000340)) 18:25:38 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440c2, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) ioctl$SNDCTL_TMR_START(r1, 0x5402) connect$rxrpc(r0, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000140)={0x1, 0x32}, 0x2) 18:25:38 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000011c0)={0x4c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}, @register_looper, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:38 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06f8ff4800000000"], 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0xb01580) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000380)={{&(0x7f0000000300)={'Accelerator\x00', {&(0x7f00000001c0)=@adf_dec={@format={'Cy', '5', 'RingTx\x00'}, {0x40}, {&(0x7f0000000100)=@adf_str={@normal='NumberDcInstances\x00', {"02ed933fe18c09110e6c498d2909be04355b1b76d81b348402e4268e28cb7021a879478f4a761dcddb7c961b0dfc8bfb286f0d2956836b8e8fa3814f80767009"}}}}}, {&(0x7f0000000280)={'Accelerator1\x00'}}}}, 0xfb}) 18:25:38 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) 18:25:38 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}, @register_looper, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:38 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440c2, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) ioctl$SNDCTL_TMR_START(r1, 0x5402) connect$rxrpc(r0, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000140)={0x1, 0x32}, 0x2) 18:25:38 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:38 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x35be8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000200)) syz_io_uring_setup(0x7fe0, &(0x7f0000000280)={0x0, 0x4000c90e, 0x2744fff8fb0fcd54, 0x1, 0x29}, &(0x7f0000000380), &(0x7f0000000340)) 18:25:38 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06f8ff4800000000"], 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0xb01580) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000380)={{&(0x7f0000000300)={'Accelerator\x00', {&(0x7f00000001c0)=@adf_dec={@format={'Cy', '5', 'RingTx\x00'}, {0x40}, {&(0x7f0000000100)=@adf_str={@normal='NumberDcInstances\x00', {"02ed933fe18c09110e6c498d2909be04355b1b76d81b348402e4268e28cb7021a879478f4a761dcddb7c961b0dfc8bfb286f0d2956836b8e8fa3814f80767009"}}}}}, {&(0x7f0000000280)={'Accelerator1\x00'}}}}, 0xfb}) 18:25:38 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x1}}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000040)=0x14) 18:25:38 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440c2, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) ioctl$SNDCTL_TMR_START(r1, 0x5402) connect$rxrpc(r0, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000140)={0x1, 0x32}, 0x2) 18:25:38 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}, @register_looper, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) [ 2523.867898][T26270] binder: 26269:26270 unknown command 1224734726 18:25:38 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x35be8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) syz_io_uring_setup(0x7fe0, &(0x7f0000000280)={0x0, 0x4000c90e, 0x2744fff8fb0fcd54, 0x1, 0x29}, &(0x7f0000000380), &(0x7f0000000340)) [ 2523.911326][T26270] binder: 26269:26270 ioctl c0306201 20000000 returned -22 18:25:38 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000100)=[@acquire_done={0x40106309, 0x3}], 0xb0, 0x0, &(0x7f0000000140)="57334403ea17cf884930d29134820ba7deafab7e5653d367425bac4abe8b53b90090380dc4b82f5620885dfcb80ae857950e9abae1fa2b191d60d2b0c18b40daf552d25c14d0c684f051bc2ba2e8231b1721d00930ee1be37af07a1e30a24e7154f0170064126c7adcf265bb5e2bff67d1f973d845949219ec7420b9804dbc4d52a7947f1cd9967f018df86ac61fc34d96ddae3cc51304a2ebd091c5fa7b8fad1428b687b438f8eed40c3486ff9e4550"}) 18:25:39 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440c2, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) ioctl$SNDCTL_TMR_START(r0, 0x5402) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000140)={0x1, 0x32}, 0x2) 18:25:39 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x1}}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000040)=0x14) (async) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000040)=0x14) 18:25:39 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}, @register_looper, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:39 executing program 4: connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bind$isdn(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x1, 0x0, 0xff, 0x80}, 0x6) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000001c0)=0x14) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000240)={0x80, 0x2, 'client0\x00', 0x0, "fbc3de8b97878311", "a61d0eab92f1054ba56658cfa74cbeed5a503628dc33001fce4b6402b9a550e2", 0x7, 0x5}) sendto$isdn(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000088d2032103e72de1ac5b39"], 0x8, 0x20000044, &(0x7f0000000140)={0x22, 0x2, 0x4, 0x4, 0x1}, 0x6) 18:25:39 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x7fe0, &(0x7f0000000280)={0x0, 0x4000c90e, 0x2744fff8fb0fcd54, 0x1, 0x29}, &(0x7f0000000380), &(0x7f0000000340)) 18:25:39 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x1}}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000040)=0x14) 18:25:39 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000100)=[@acquire_done={0x40106309, 0x3}], 0xb0, 0x0, &(0x7f0000000140)="57334403ea17cf884930d29134820ba7deafab7e5653d367425bac4abe8b53b90090380dc4b82f5620885dfcb80ae857950e9abae1fa2b191d60d2b0c18b40daf552d25c14d0c684f051bc2ba2e8231b1721d00930ee1be37af07a1e30a24e7154f0170064126c7adcf265bb5e2bff67d1f973d845949219ec7420b9804dbc4d52a7947f1cd9967f018df86ac61fc34d96ddae3cc51304a2ebd091c5fa7b8fad1428b687b438f8eed40c3486ff9e4550"}) 18:25:39 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}, @register_looper, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f00000001c0)="dbb0188658e34b5f673dfd25363611e7b33842bf3220a47a443525402dc446bfa7dc2d8fd07c15d25daddec4678156925ea7e873b79f006e14b4157dcb346d9fe31c4f45f0c641a835274969a9125d39ca0de0e41170886089aadb32158faa56c7181de9fa9572e5d80456775b3708b24654679867781f1b1dcc9223fad2ca9bd22146dd5ad37d7aa09068e002cf3a85ef05df9cb68c551a6598ea3a6cb4fa79aa4d6d116ad9fb845ac378f343f0169989e99322367dbbf8cd061572d8a904e64c8379eba4c62328cdd48913eef2ab7c3e6ec5d9b2603de216cffb1d35ae4f0d294faf1d52335bac12969970bb5f29740cc02d018af79eab31e68d3748279237adea36fa8e35feb8dbdf2a64a8120eca48bf3a35d3d18e3c0b512a5b165d45009565a02185be4e6942a3481c0050fa820b352fb72e68af1ff2f097c08b77115e55538efd7e3ff5f6523ca0104c67bdc801bc517d748e1745d50a18a4035dfd4ebbdb010e28d824e4202dd7f31d25ec556087c1af2ebd870e112ec7f3c1193362f2f418ca1febf6b482fad6b54a55d8d6264ac5e77b5ca10f6ecae813f509c17372692aa0d2e365c412335a779fc70701c98f98b644b049f7ca73a44255dc30e05ef892cb14ced058e15dea2abfa56f4c6d5504724a950a9e08f6f760b8a628dd4952d0c9583eca9cc8135d917635b129837b5f3c260cae2badd7667bdaa093a9cc65480595c1b0e68a0a5b7b20764c602d848e7b3b7ada383946f80dfbd26c8357a33ad2a75347181cc52e5707f92597514608da1dfcc5aaf57114ddda40133315ef9ac830212e07e257e624b8a0cdbc20e43462dc8116ffa23d8b5f87b17a98791943aa61bfed7e82d2304fda1545b087fd9a342fcd53691a456d04b763e493328d16922c4390e4bbf0f32e7518ab9209da67d06a1f5a0a699778a2e9b8f5bbf27690b5aebd05d636b733922553438b80524e3b105a43ef6eed6670074a1dcf1ae678934bb79522fb20eb00795d8f7634c590f94433eaee247481e4fd8a41416eb4335e46c70fab2f71d7f92ff32b18e228ee8656ae592f34b24eca4571ae5c76f08dca16229109ef26caa96cf13a1c935f887f8351b97eec9f7d3424255d98e4a66f33415fa2a70cc359e600a64eaaf21c7cec32e4365ee818e2630656074ee700635b0e78a9d8418ee1d03d04b520f443f025bfcecc5fed6f8e2f4b4ad77aa657dec398db3af2dfcca23372967bc257b44f167beffcf9d0ad2e47ac1f15da16271f20f37d36950d62616d55b2e6f0c8614545fadb6282d553b17ea5877601e698d8e60f5f15ac4709a7c50aa681f67744f30544c502dae14e5b36f022a1fe6682617614353e631c46e18396f39f7d57dc96a650d3c5a750c214ac19adc0816b4d90afe53be86ce8fa29cb3ad560678c339baebbe8d67d751884cd03f0669e810dc9c169bc726b628f2aed914d7378eb0fa7d27a60195b7c94681f869dd19814262b9c4d53a99bdbd6ca3cda9471caede819b9c94cfdab9d0423128d288498fdc2e6d52bfd81fe7245a95998b87f8aca463d8a67bca457b0a80abc70d0ae81863d4986e770b4576a49eaafa597ab05fe35d21a3d72147438d7da9d06de1ad2659186f769c20818befe043541d1b667211e023d1db8272c0621403cae68e5fcdf6329756728e245d9bb77691e724397e51afbb567265fb8ead2692f76843ffb10bbee55c5314484ad129d354b36d229fc01b79044679f58a98a4a99e67a86d20b6d6fc2eae0b7809743f089c5c53fc95cd21efacf3f455104619c13842f9153dd1de9496bc0be0d35a9aaa920477ce7f1cf48da1badabe159c8ff3137af1d8d5e64a2f3891082147c6894e27d1514065ea51f70d03741cd105dbbc8c71bd5df7e20476081d8f72c1c74fe5306b94167c1ec483c83842cb6b1c010efca4714f67b571154acf8c6937d7a5176adaaec41e10ebccdd7a0eea1f6e77d0fd4032f8fac6e691479e019213792beda4454880cefe27eb9db9f20f030a1620b8c48209d68847910b5c69169bae8f27d406388d940cf89e9443388d0b468ebc3b4f6eceaeec3dd9491a2183f848c06dbc6f24697af5fd16945c12a1431db594a556110e9501b22aa0d7bfcacbb0af89f4bcd6b4f3350b2699e4d628dd448c295113bc6256234b92e5ae4ec8d5bac26a6ba05260997d1222d0f6e9ba05c90e09bcbc145e36a52465d105a11c8273b4c9524d72c746af50bf2c64fb8d3d69115ad903d977f54ee5505abb8a42ac73929f69e278262131acf034858566d44a14101446c58c3748aadb2f9f5f08f45dbaea23d3dbf0005222a8cb4c5544328e69ad8137f4301680daa0a21803cca78c02457a346cd1d78c5283260768bb7255ba54b03c8ed86cfd5b7a9b65c9d9336dafafbc30cd2ebe4a50fe1cd591d4111c4a5624deee50e168956705af88af21a9f17905a5ffbeb20c1dd1b06a51651165f2a0cb9e1c5ac2936563a2c4ddae91236119a1c0bc8320752583f6235a703cefb46a70830c94bb25dc5199281923c484cb2e00854d2ab405de92154ba9dd75fc4db9d2afa0036c48626e75f53f249b2fac62bd19eea41e521e38bc4afb3ba5372d43310aaaa38e2d9b7f5d37dd05016c71bda73cf07f35273e92444f10aa88c644dad252f7b5f80fd643bc407658b16ef4a6249c1544992bd65c860a4d74a58450ce6515acb1e64a815b49c37dad1abbcc917ed2786a1a6887d7b42634d4c283388eb7279264c3dc025a90a57a2a82c23afab04452fae7217123b2de3124e5347c9c542d8024e43f6f9bbd993ed9bbb633b530d3a30c61dd3572d11489981da97aeec948aefa75989d557fb20c74ee4d4396e6142eeb48fa7f032d94d3e0b8a74429de23ca930b781630e06f49e61ecc078870b9109091b3b47094d1a5247a4340f66d7f53fc16f1df17ac36df92164659fa2907191b09595ef6ba98a6824240c441b8de2873b5d08cbf106c15c6fc54c121f007cfadd8895425643360ba499d85d2c1539f56a270ba14309317e6554b30b07b24b381230a22a73a95fa7c11cf68a16248ea4be9cd91a7523726dfe85a4db30bd7ecf3513709bdb03550ab162c06a595584a6da90fc8d2933e68e1586512a2713f5db3a660dc36e0161c5e74a6e25f3185c08a4391fca0c311d72582902e9060301d808716d82ae812ed61582563b4ed2513b98d4c8dd79ae4d131142feef523261a7686d81bb36cd87d7eda98a1f3d364ec8bd8a4750a78f77e075e5856f05aab5278ed6c66230672435b0269123c676f0a0209371aca102d80d6ce7bcc56ac6d3e060834d38f820d9bf10808e715983551ebae7eccf1cb983737a5b36a7602756148f8eb6472e27aec52a6a0cf31a4fc9c7ac3b4eafd5d7d67254f04bb96581e8e535c8112cf6fea608de2930503601b282fc98578a89c79ca85abce3225cb50fcf8adf8065df24d62dc07159d7ecdb67b6b20fcb666e59d3a520787d9add295d77f84d7920d11b3d8f1a7ad3fe50568e545b37cb48877567eddcd695d06eb46ca69b629ee72bb00867ca9d36e83b61ce203db086211fe55bff82d24b6e287658f2e22052431fdcfc9a3b45cbe962cb59aee528932bc68e703003105935248266fd3ad49d827e8aa2c634bcaf4ab1deac046b84d0813bc455c0f11361e53100a6b7bdf3ea9ebdea9c5ae70395a859f4b67a39ea59a43419e728a4e4bafcd39c710aae61d71ea96af88ffeef9dd48a9dd087cc10f1c44e22c610b1ebe394feac59d2e2e88258fdf0291e178800b2905bc0a95553ba8bef64f7c86c43c8d2e1a79363189188c333142fc0cd6700ffb03e3c4a2d92aa716ca08045f20c8378d868d5453f475222a9a464773ef9d6a9b0171ec79f03efbd290399a2e4cd85dbb19c8ea085fe613ff1e71d280ad260abf4fd592a42747c130b9d1e07ed6f7966a5b9310434ad4c622574ef0d61423ca5c3ad1d3382dead7b76066b11208d6ff2fd57a79315f2ec012c2853577a71364c4e818a0b365a9fa9b39bfcfaf036a5b64db3b6b575d8067e036a9b6a42474eafb7823c3f8b85d1644c0bfdae9ce5f3e8dbbb9c1ee8bba58f72bbf0d4d12e04f73321652e94f5b27eae214a6d74835ea37e40c55e5e9272222c72587636430fa90aef4c7a665395235bd5fd9605d34d6a79633b212da28cb2abc9230748fbb5225636c64d4a0461a47cb788aa1c040e61260653ccd8e3dad9981a65abb0ff009ec8a13082818ef627fa8017b96889b33c2a98fd548fb02fe5bbcf0c78cc141ebbdd631e8b39dd89eb068d9078e4edf5bc6103cce309c2da5b38e1cadf78464665420d70e314ff13babcf8191086dedd1ace21251680fcfe7f96b495868cf48bc0488bac03cae03a737793152f2d0f42a501ba28256dd441ca5abc03c798261ee0171cd3f466fcfa25645e691d3c8eb6772610751e5fddc8f14048a539f367cf55b4356981477ce66c1de2ebf4e52b6429799a1ea0033278300950e77f2924ce10812b4430e22e14aee682324989972941aab0a60a6e50f2520df730e4999a7ca65f2fde740b8647c0cb93f1c7ec03f788bec74074af21230b0e75468699bad898fff78d1fdccaa828fb5f2a17979393fe4b2274126b04e7f417249e2e41683c4497eb4252a74a3c1f49b39779bc94e7ff6370c7361cc1a0bc00364e5edfe5eca5fb9d4efa76b43446fcb927bcecfcbf1ecd1853b02b6622bd5f2170570a5c888d32ede8c41970b928833057795312cf3c5cd72c31022c202c5b94bc1f028ebb36a25ae46a9aeae84c6778c3f036118dc49a492107a1b25f1f9a536cca6079337a244343f8fd0d593ff7ac5ac5c7635accad5bc87f73337d1295713a65661c77b2ab03a554faa3db2bcc054ad7b5cfda1cc438e1ba09e9ad171881ec7591d847e0c3e6ef32903fb53f5d0ba5ccca8d835861fb4ec72fb116b97bbc68c3f5f0fa2baa24f6d56a62a0d12c59e2bb09f85e57d8c555ecb14fecd59a53d5605ba63d9ded989dda66002742ca15baa3028ed2b5a8d20c6ff433fce8e86dbae07471b73d362abe113a7e661d7488e16b62ed4712ac4e6926dd508dcd606265d7bcec9a88c0fe9ad43e228e1c3d76dad9e1bd98b2262f417875495574f78fa8238e72ceada07a62650e8b1727baeb0da10df74a1c396f3eee2d7445202e32583c377c77cfd10b2d3507b56d1c18b364f2a93d94019b4a59c4f4fb8df0f48d32e7b95223a258595f925faea7f5a6aaa06775a8c1786cd32912293c6d36e8d0cce3fed3aff139982c47b7030e1176829f2903474f6df039044f0f5930f588024599349ae3378dca7c9543151e339c67b14eee591a74c5c9c4fa07e292a92114d80bdfd709df831df6381ac6fed257cd9d5ff884e8e74e94a20b2b5952353afafa543e7f3431e4874718f63cf4c87bd934a7e36cfa7605779f6e335e897592bb0e7a253b86460a3a6e46f08678892c8b7afc6b4feae5ab351005d82616a640dba41b411d012f9e6881e8c2b1699f278f0864b87572311d67b07f27af48175d0949ec86f99d46ba8869b5a361ba42d956ef4438f79b45e724bb589c2972cc3e890b6e4e32cbc6ee840f7334ad2410204b0786f9898f7f79848b61bf7fda028a62caa3f630df64d3513dc3fc1189d5aeabc102f58b984a3b5aa0cefa1623a865e24dffa337c174b13431015c699927a2e2c80cfd8e669092564af0c9c128b3a4d7cd176a650bc5786a1ebe9de30e5faf6ceb8edbb9f4cd1864d8ff22c7dd165444422f374065abcd3ec6334a"}) 18:25:39 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440c2, 0x0) socket$rxrpc(0x21, 0x2, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000140)={0x1, 0x32}, 0x2) 18:25:39 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x7fe0, &(0x7f0000000280)={0x0, 0x4000c90e, 0x2744fff8fb0fcd54, 0x1, 0x29}, &(0x7f0000000380), &(0x7f0000000340)) 18:25:39 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000100)=[@acquire_done={0x40106309, 0x3}], 0xb0, 0x0, &(0x7f0000000140)="57334403ea17cf884930d29134820ba7deafab7e5653d367425bac4abe8b53b90090380dc4b82f5620885dfcb80ae857950e9abae1fa2b191d60d2b0c18b40daf552d25c14d0c684f051bc2ba2e8231b1721d00930ee1be37af07a1e30a24e7154f0170064126c7adcf265bb5e2bff67d1f973d845949219ec7420b9804dbc4d52a7947f1cd9967f018df86ac61fc34d96ddae3cc51304a2ebd091c5fa7b8fad1428b687b438f8eed40c3486ff9e4550"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000100)=[@acquire_done={0x40106309, 0x3}], 0xb0, 0x0, &(0x7f0000000140)="57334403ea17cf884930d29134820ba7deafab7e5653d367425bac4abe8b53b90090380dc4b82f5620885dfcb80ae857950e9abae1fa2b191d60d2b0c18b40daf552d25c14d0c684f051bc2ba2e8231b1721d00930ee1be37af07a1e30a24e7154f0170064126c7adcf265bb5e2bff67d1f973d845949219ec7420b9804dbc4d52a7947f1cd9967f018df86ac61fc34d96ddae3cc51304a2ebd091c5fa7b8fad1428b687b438f8eed40c3486ff9e4550"}) 18:25:39 executing program 4: connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bind$isdn(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x1, 0x0, 0xff, 0x80}, 0x6) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000001c0)=0x14) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000006c0)={0x101}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000240)={0x80, 0x2, 'client0\x00', 0x0, "fbc3de8b97878311", "a61d0eab92f1054ba56658cfa74cbeed5a503628dc33001fce4b6402b9a550e2", 0x7, 0x5}) sendto$isdn(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000088d2032103e72de1ac5b39"], 0x8, 0x20000044, &(0x7f0000000140)={0x22, 0x2, 0x4, 0x4, 0x1}, 0x6) 18:25:39 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="066bae784e1cc457ff4941e10ddb5e990fe14000000a00"], 0x0, 0x0, 0x0}) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000040)={0x0, 0x9}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000740)) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f00000001c0)={'\x00', 0x1, 0x1, 0x562a}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000240)=[0x0, 0x0], 0x4000004d, 0x80000, 0x0, 0xffffffffffffffff}) read$eventfd(r2, &(0x7f0000000180), 0x8) 18:25:39 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440c2, 0x0) socket$rxrpc(0x21, 0x2, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000140)={0x1, 0x32}, 0x2) 18:25:39 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}, @register_looper, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:39 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_setup(0x7fe0, &(0x7f0000000280)={0x0, 0x4000c90e, 0x2744fff8fb0fcd54, 0x1, 0x29}, &(0x7f0000000380), &(0x7f0000000340)) 18:25:39 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) 18:25:39 executing program 4: connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bind$isdn(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x1, 0x0, 0xff, 0x80}, 0x6) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000001c0)=0x14) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000240)={0x80, 0x2, 'client0\x00', 0x0, "fbc3de8b97878311", "a61d0eab92f1054ba56658cfa74cbeed5a503628dc33001fce4b6402b9a550e2", 0x7, 0x5}) (async) sendto$isdn(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000088d2032103e72de1ac5b39"], 0x8, 0x20000044, &(0x7f0000000140)={0x22, 0x2, 0x4, 0x4, 0x1}, 0x6) [ 2524.643877][T26316] binder: 26314:26316 unknown command 2024696582 [ 2524.661742][T26316] binder: 26314:26316 ioctl c0306201 20000000 returned -22 18:25:39 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440c2, 0x0) socket$rxrpc(0x21, 0x2, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000140)={0x1, 0x32}, 0x2) 18:25:39 executing program 3: syz_io_uring_setup(0x7fe0, &(0x7f0000000280)={0x0, 0x4000c90e, 0x2744fff8fb0fcd54, 0x1, 0x29}, &(0x7f0000000380), &(0x7f0000000340)) 18:25:39 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}, @register_looper, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:39 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="066bae784e1cc457ff4941e10ddb5e990fe14000000a00"], 0x0, 0x0, 0x0}) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000040)={0x0, 0x9}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000740)) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f00000001c0)={'\x00', 0x1, 0x1, 0x562a}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000240)=[0x0, 0x0], 0x4000004d, 0x80000, 0x0, 0xffffffffffffffff}) (rerun: 64) read$eventfd(r2, &(0x7f0000000180), 0x8) 18:25:39 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) 18:25:39 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440c2, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000140)={0x1, 0x32}, 0x2) 18:25:39 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}, @register_looper, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) [ 2524.896725][T26332] binder: 26328:26332 unknown command 2024696582 [ 2524.918367][T26332] binder: 26328:26332 ioctl c0306201 20000000 returned -22 18:25:39 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) 18:25:39 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x4000c90e, 0x2744fff8fb0fcd54, 0x1, 0x29}, &(0x7f0000000380), &(0x7f0000000340)) 18:25:39 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000004c0), 0xcd, 0x4240) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40081}, 0x4008010) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000840)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000a80), 0x2) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000b00)={&(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000b80)={0x3, 0x0, &(0x7f0000000b40)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000c00)={0x1, 0x0, &(0x7f0000000bc0)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000c80)={&(0x7f0000000c40)=[0x0, r7, r8], 0x3, 0x800}) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x7c, r5, 0x818, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff80}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20024cc0) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r9, 0xc0603d06, &(0x7f0000000740)) ioctl$PTP_PIN_GETFUNC2(r9, 0xc0603d0f, &(0x7f0000000680)={'\x00', 0x6, 0x2, 0x4}) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000000480)={{&(0x7f0000000180)={'Accelerator0\x00', {&(0x7f0000000240)=@adf_hex={@format={'Cy', '1', 'RingSymRx\x00'}, {0x7}, {&(0x7f00000000c0)=@adf_str={@format={'Dc', '4', 'NumConcurrentRequests\x00'}, {"89e209dc7260762d87fe953e29953b40ea22d88d006c866a3528692e6d05f174ba8621f544daa46e655e01b12a0c31635f1892d2ba9eff22259e49bb1b3a73ad"}}}}}, {&(0x7f0000000000)={'Accelerator\x00', {&(0x7f00000003c0)=@adf_dec={@bank={'Bank', '5', 'InterruptCoalescingTimerNs\x00'}, {0x8000}, {&(0x7f0000000300)=@adf_str={@bank={'Bank', '0', 'InterruptCoalescingEnabled\x00'}, {"ad00a830a48e0b39d95d2b1938b78402ebfa0c7c8b79a4f0ea84c63466bbbdf62e969ea645e25c22240370ff58c5d958d08d37833c40d6e6167511c01ed60112"}}}}}}}}}, 0x5}) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:40 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="066bae784e1cc457ff4941e10ddb5e990fe14000000a00"], 0x0, 0x0, 0x0}) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000040)={0x0, 0x9}, 0x0) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000740)) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f00000001c0)={'\x00', 0x1, 0x1, 0x562a}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000240)=[0x0, 0x0], 0x4000004d, 0x80000, 0x0, 0xffffffffffffffff}) (rerun: 32) read$eventfd(r2, &(0x7f0000000180), 0x8) 18:25:40 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440c2, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000140)={0x1, 0x32}, 0x2) [ 2525.096625][T26340] binder: 26339:26340 ioctl c0306201 0 returned -14 18:25:40 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000000380), &(0x7f0000000340)) 18:25:40 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) 18:25:40 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f00000004c0), 0xcd, 0x4240) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x1) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r1) (rerun: 64) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40081}, 0x4008010) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder1\x00', 0x2, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000840)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) (rerun: 32) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000a80), 0x2) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r1) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000b00)={&(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000b80)={0x3, 0x0, &(0x7f0000000b40)=[0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000c00)={0x1, 0x0, &(0x7f0000000bc0)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000c80)={&(0x7f0000000c40)=[0x0, r7, r8], 0x3, 0x800}) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x7c, r5, 0x818, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff80}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20024cc0) (async) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r9, 0xc0603d06, &(0x7f0000000740)) ioctl$PTP_PIN_GETFUNC2(r9, 0xc0603d0f, &(0x7f0000000680)={'\x00', 0x6, 0x2, 0x4}) (async, rerun: 64) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000000480)={{&(0x7f0000000180)={'Accelerator0\x00', {&(0x7f0000000240)=@adf_hex={@format={'Cy', '1', 'RingSymRx\x00'}, {0x7}, {&(0x7f00000000c0)=@adf_str={@format={'Dc', '4', 'NumConcurrentRequests\x00'}, {"89e209dc7260762d87fe953e29953b40ea22d88d006c866a3528692e6d05f174ba8621f544daa46e655e01b12a0c31635f1892d2ba9eff22259e49bb1b3a73ad"}}}}}, {&(0x7f0000000000)={'Accelerator\x00', {&(0x7f00000003c0)=@adf_dec={@bank={'Bank', '5', 'InterruptCoalescingTimerNs\x00'}, {0x8000}, {&(0x7f0000000300)=@adf_str={@bank={'Bank', '0', 'InterruptCoalescingEnabled\x00'}, {"ad00a830a48e0b39d95d2b1938b78402ebfa0c7c8b79a4f0ea84c63466bbbdf62e969ea645e25c22240370ff58c5d958d08d37833c40d6e6167511c01ed60112"}}}}}}}}}, 0x5}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2525.264287][T26350] binder: 26348:26350 unknown command 2024696582 [ 2525.287407][T26350] binder: 26348:26350 ioctl c0306201 20000000 returned -22 18:25:40 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) 18:25:40 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000140)={0x1, 0x32}, 0x2) 18:25:40 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000000380), &(0x7f0000000340)) 18:25:40 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000011c0)={0x4c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}, @register_looper, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:40 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000100)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0663044000002000"], 0x0, 0x0, 0x0}) 18:25:40 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f00000004c0), 0xcd, 0x4240) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x1) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40081}, 0x4008010) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder1\x00', 0x2, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000840)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) (rerun: 32) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000a80), 0x2) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r1) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000b00)={&(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000b80)={0x3, 0x0, &(0x7f0000000b40)=[0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000c00)={0x1, 0x0, &(0x7f0000000bc0)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000c80)={&(0x7f0000000c40)=[0x0, r7, r8], 0x3, 0x800}) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x7c, r5, 0x818, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff80}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20024cc0) (async) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r9, 0xc0603d06, &(0x7f0000000740)) (async) ioctl$PTP_PIN_GETFUNC2(r9, 0xc0603d0f, &(0x7f0000000680)={'\x00', 0x6, 0x2, 0x4}) (async, rerun: 32) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000000480)={{&(0x7f0000000180)={'Accelerator0\x00', {&(0x7f0000000240)=@adf_hex={@format={'Cy', '1', 'RingSymRx\x00'}, {0x7}, {&(0x7f00000000c0)=@adf_str={@format={'Dc', '4', 'NumConcurrentRequests\x00'}, {"89e209dc7260762d87fe953e29953b40ea22d88d006c866a3528692e6d05f174ba8621f544daa46e655e01b12a0c31635f1892d2ba9eff22259e49bb1b3a73ad"}}}}}, {&(0x7f0000000000)={'Accelerator\x00', {&(0x7f00000003c0)=@adf_dec={@bank={'Bank', '5', 'InterruptCoalescingTimerNs\x00'}, {0x8000}, {&(0x7f0000000300)=@adf_str={@bank={'Bank', '0', 'InterruptCoalescingEnabled\x00'}, {"ad00a830a48e0b39d95d2b1938b78402ebfa0c7c8b79a4f0ea84c63466bbbdf62e969ea645e25c22240370ff58c5d958d08d37833c40d6e6167511c01ed60112"}}}}}}}}}, 0x5}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:40 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) 18:25:40 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000000380), &(0x7f0000000340)) 18:25:40 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000140)={0x1, 0x32}, 0x2) 18:25:40 executing program 5: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000140)={0x1, 0x32}, 0x2) 18:25:41 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x3b0f, &(0x7f0000000100)={0x0, 0x57c9, 0x8, 0x0, 0x91}, &(0x7f0000000040), &(0x7f0000000180)) r2 = eventfd2(0x0, 0x0) write$eventfd(r2, &(0x7f0000000080), 0x8) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000001c0)=r2, 0x1) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:41 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x0, 0x2744fff8fb0fcd54, 0x1, 0x29}, &(0x7f0000000380), &(0x7f0000000340)) 18:25:41 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000100)) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0663044000002000"], 0x0, 0x0, 0x0}) [ 2526.042784][T26377] binder: 26373:26377 ioctl c0306201 0 returned -14 18:25:41 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000011c0)={0x4c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}, @register_looper, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:41 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000100), 0x8) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r3, &(0x7f0000002240)={0x18, 0x0, r4}, 0x18) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r6, &(0x7f0000002240)={0x18, 0x0, r7}, 0x18) write$FUSE_IOCTL(r3, &(0x7f0000002240)={0x20, 0x0, r7, {0x9, 0x0, 0x1, 0x80000001}}, 0x20) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @null]}) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x8}}, 0x18) 18:25:41 executing program 5: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000140)={0x1, 0x32}, 0x2) 18:25:41 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000100)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0663044000002000"], 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000100)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0663044000002000"], 0x0, 0x0, 0x0}) (async) 18:25:41 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x29}, &(0x7f0000000380), &(0x7f0000000340)) 18:25:41 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x3b0f, &(0x7f0000000100)={0x0, 0x57c9, 0x8, 0x0, 0x91}, &(0x7f0000000040), &(0x7f0000000180)) (async) r2 = eventfd2(0x0, 0x0) write$eventfd(r2, &(0x7f0000000080), 0x8) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000001c0)=r2, 0x1) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) [ 2526.315029][T26394] binder: 26393:26394 ioctl c0306201 0 returned -14 18:25:41 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000011c0)={0x4c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}, @register_looper, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:41 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000100), 0x8) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r3, &(0x7f0000002240)={0x18, 0x0, r4}, 0x18) (async) write$FUSE_LSEEK(r3, &(0x7f0000002240)={0x18, 0x0, r4}, 0x18) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r6, &(0x7f0000002240)={0x18, 0x0, r7}, 0x18) write$FUSE_IOCTL(r3, &(0x7f0000002240)={0x20, 0x0, r7, {0x9, 0x0, 0x1, 0x80000001}}, 0x20) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @null]}) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x8}}, 0x18) 18:25:41 executing program 5: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000140)={0x1, 0x32}, 0x2) 18:25:41 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x29}, &(0x7f0000000380), &(0x7f0000000340)) [ 2526.511108][T26406] binder: 26405:26406 ioctl c0306201 0 returned -14 18:25:41 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) r8 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x8) read$ptp(r7, &(0x7f0000006380)=""/118, 0x76) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r9, &(0x7f0000002240)={0x18, 0x0, r10}, 0x18) read$FUSE(r9, &(0x7f0000004300)={0x2020}, 0x2020) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000200)) read$FUSE(r5, &(0x7f00000022c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r6, &(0x7f0000006500)={0x2020}, 0x2020) write$FUSE_LSEEK(r4, &(0x7f0000002240)={0x18}, 0x18) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, r11, {0x80000001}}, 0x18) 18:25:41 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000140)={0x1, 0x32}, 0x2) 18:25:41 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 18:25:41 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x3b0f, &(0x7f0000000100)={0x0, 0x57c9, 0x8, 0x0, 0x91}, &(0x7f0000000040), &(0x7f0000000180)) r2 = eventfd2(0x0, 0x0) write$eventfd(r2, &(0x7f0000000080), 0x8) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000001c0)=r2, 0x1) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:41 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x29}, &(0x7f0000000380), &(0x7f0000000340)) 18:25:41 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000140)={0x1, 0x32}, 0x2) 18:25:41 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x0, 0x2744fff8fb0fcd54, 0x0, 0x29}, &(0x7f0000000380), &(0x7f0000000340)) [ 2526.813874][T26425] binder: 26422:26425 ioctl c0306201 0 returned -14 18:25:41 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000fee000/0x10000)=nil, 0x10000, 0x1, 0x11, r0, 0x7fff) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x9, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 18:25:41 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000140)={0x1, 0x32}, 0x2) [ 2526.857722][T26425] binder: 26422:26425 ioctl c0306201 0 returned -14 18:25:42 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000100), 0x8) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r3, &(0x7f0000002240)={0x18, 0x0, r4}, 0x18) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r6, &(0x7f0000002240)={0x18, 0x0, r7}, 0x18) write$FUSE_IOCTL(r3, &(0x7f0000002240)={0x20, 0x0, r7, {0x9, 0x0, 0x1, 0x80000001}}, 0x20) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @null]}) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x8}}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) (async) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000100), 0x8) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) (async) write$FUSE_LSEEK(r3, &(0x7f0000002240)={0x18, 0x0, r4}, 0x18) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) (async) write$FUSE_LSEEK(r6, &(0x7f0000002240)={0x18, 0x0, r7}, 0x18) (async) write$FUSE_IOCTL(r3, &(0x7f0000002240)={0x20, 0x0, r7, {0x9, 0x0, 0x1, 0x80000001}}, 0x20) (async) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) (async) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @null]}) (async) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x8}}, 0x18) (async) 18:25:42 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 18:25:42 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x0, 0x2744fff8fb0fcd54}, &(0x7f0000000380), &(0x7f0000000340)) [ 2527.467433][T26439] binder: 26438:26439 ioctl c0306201 0 returned -14 [ 2527.475011][T26439] binder: 26438:26439 ioctl c0306201 0 returned -14 18:25:42 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000140)={0x1, 0x32}, 0x2) 18:25:42 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000fee000/0x10000)=nil, 0x10000, 0x1, 0x11, r0, 0x7fff) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x9, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 18:25:42 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x0, 0x2744fff8fb0fcd54}, 0x0, &(0x7f0000000340)) 18:25:42 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:42 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 18:25:42 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) (async) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) (async) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) (async) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) r8 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x8) (async) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x8) read$ptp(r7, &(0x7f0000006380)=""/118, 0x76) (async) read$ptp(r7, &(0x7f0000006380)=""/118, 0x76) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r9, &(0x7f0000002240)={0x18, 0x0, r10}, 0x18) (async) write$FUSE_LSEEK(r9, &(0x7f0000002240)={0x18, 0x0, r10}, 0x18) read$FUSE(r9, &(0x7f0000004300)={0x2020}, 0x2020) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000200)) read$FUSE(r5, &(0x7f00000022c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r6, &(0x7f0000006500)={0x2020}, 0x2020) write$FUSE_LSEEK(r4, &(0x7f0000002240)={0x18}, 0x18) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, r11, {0x80000001}}, 0x18) 18:25:42 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000140)={0x1, 0x32}, 0x2) 18:25:42 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000fee000/0x10000)=nil, 0x10000, 0x1, 0x11, r0, 0x7fff) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x9, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 18:25:42 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x0, 0x2744fff8fb0fcd54}, 0x0, 0x0) 18:25:42 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2527.716071][T26457] binder: 26450:26457 ioctl c0306201 0 returned -14 18:25:42 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000140)={0x1, 0x32}, 0x2) [ 2527.771343][T26464] binder: 26450:26464 ioctl c0306201 0 returned -14 18:25:42 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x804, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ca5d14344c360663044000000000"], 0x0, 0x0, 0x0}) 18:25:42 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) (async) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) (async) r8 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, 0x0) (async) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x8) (async) read$ptp(r7, &(0x7f0000006380)=""/118, 0x76) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r9, &(0x7f0000002240)={0x18, 0x0, r10}, 0x18) read$FUSE(r9, &(0x7f0000004300)={0x2020}, 0x2020) (async) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000200)) (async) read$FUSE(r5, &(0x7f00000022c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r6, &(0x7f0000006500)={0x2020}, 0x2020) (async) write$FUSE_LSEEK(r4, &(0x7f0000002240)={0x18}, 0x18) (async) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, r11, {0x80000001}}, 0x18) 18:25:42 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1000, 0x0, &(0x7f00000001c0)="dbb0188658e34b5f673dfd25363611e7b33842bf3220a47a443525402dc446bfa7dc2d8fd07c15d25daddec4678156925ea7e873b79f006e14b4157dcb346d9fe31c4f45f0c641a835274969a9125d39ca0de0e41170886089aadb32158faa56c7181de9fa9572e5d80456775b3708b24654679867781f1b1dcc9223fad2ca9bd22146dd5ad37d7aa09068e002cf3a85ef05df9cb68c551a6598ea3a6cb4fa79aa4d6d116ad9fb845ac378f343f0169989e99322367dbbf8cd061572d8a904e64c8379eba4c62328cdd48913eef2ab7c3e6ec5d9b2603de216cffb1d35ae4f0d294faf1d52335bac12969970bb5f29740cc02d018af79eab31e68d3748279237adea36fa8e35feb8dbdf2a64a8120eca48bf3a35d3d18e3c0b512a5b165d45009565a02185be4e6942a3481c0050fa820b352fb72e68af1ff2f097c08b77115e55538efd7e3ff5f6523ca0104c67bdc801bc517d748e1745d50a18a4035dfd4ebbdb010e28d824e4202dd7f31d25ec556087c1af2ebd870e112ec7f3c1193362f2f418ca1febf6b482fad6b54a55d8d6264ac5e77b5ca10f6ecae813f509c17372692aa0d2e365c412335a779fc70701c98f98b644b049f7ca73a44255dc30e05ef892cb14ced058e15dea2abfa56f4c6d5504724a950a9e08f6f760b8a628dd4952d0c9583eca9cc8135d917635b129837b5f3c260cae2badd7667bdaa093a9cc65480595c1b0e68a0a5b7b20764c602d848e7b3b7ada383946f80dfbd26c8357a33ad2a75347181cc52e5707f92597514608da1dfcc5aaf57114ddda40133315ef9ac830212e07e257e624b8a0cdbc20e43462dc8116ffa23d8b5f87b17a98791943aa61bfed7e82d2304fda1545b087fd9a342fcd53691a456d04b763e493328d16922c4390e4bbf0f32e7518ab9209da67d06a1f5a0a699778a2e9b8f5bbf27690b5aebd05d636b733922553438b80524e3b105a43ef6eed6670074a1dcf1ae678934bb79522fb20eb00795d8f7634c590f94433eaee247481e4fd8a41416eb4335e46c70fab2f71d7f92ff32b18e228ee8656ae592f34b24eca4571ae5c76f08dca16229109ef26caa96cf13a1c935f887f8351b97eec9f7d3424255d98e4a66f33415fa2a70cc359e600a64eaaf21c7cec32e4365ee818e2630656074ee700635b0e78a9d8418ee1d03d04b520f443f025bfcecc5fed6f8e2f4b4ad77aa657dec398db3af2dfcca23372967bc257b44f167beffcf9d0ad2e47ac1f15da16271f20f37d36950d62616d55b2e6f0c8614545fadb6282d553b17ea5877601e698d8e60f5f15ac4709a7c50aa681f67744f30544c502dae14e5b36f022a1fe6682617614353e631c46e18396f39f7d57dc96a650d3c5a750c214ac19adc0816b4d90afe53be86ce8fa29cb3ad560678c339baebbe8d67d751884cd03f0669e810dc9c169bc726b628f2aed914d7378eb0fa7d27a60195b7c94681f869dd19814262b9c4d53a99bdbd6ca3cda9471caede819b9c94cfdab9d0423128d288498fdc2e6d52bfd81fe7245a95998b87f8aca463d8a67bca457b0a80abc70d0ae81863d4986e770b4576a49eaafa597ab05fe35d21a3d72147438d7da9d06de1ad2659186f769c20818befe043541d1b667211e023d1db8272c0621403cae68e5fcdf6329756728e245d9bb77691e724397e51afbb567265fb8ead2692f76843ffb10bbee55c5314484ad129d354b36d229fc01b79044679f58a98a4a99e67a86d20b6d6fc2eae0b7809743f089c5c53fc95cd21efacf3f455104619c13842f9153dd1de9496bc0be0d35a9aaa920477ce7f1cf48da1badabe159c8ff3137af1d8d5e64a2f3891082147c6894e27d1514065ea51f70d03741cd105dbbc8c71bd5df7e20476081d8f72c1c74fe5306b94167c1ec483c83842cb6b1c010efca4714f67b571154acf8c6937d7a5176adaaec41e10ebccdd7a0eea1f6e77d0fd4032f8fac6e691479e019213792beda4454880cefe27eb9db9f20f030a1620b8c48209d68847910b5c69169bae8f27d406388d940cf89e9443388d0b468ebc3b4f6eceaeec3dd9491a2183f848c06dbc6f24697af5fd16945c12a1431db594a556110e9501b22aa0d7bfcacbb0af89f4bcd6b4f3350b2699e4d628dd448c295113bc6256234b92e5ae4ec8d5bac26a6ba05260997d1222d0f6e9ba05c90e09bcbc145e36a52465d105a11c8273b4c9524d72c746af50bf2c64fb8d3d69115ad903d977f54ee5505abb8a42ac73929f69e278262131acf034858566d44a14101446c58c3748aadb2f9f5f08f45dbaea23d3dbf0005222a8cb4c5544328e69ad8137f4301680daa0a21803cca78c02457a346cd1d78c5283260768bb7255ba54b03c8ed86cfd5b7a9b65c9d9336dafafbc30cd2ebe4a50fe1cd591d4111c4a5624deee50e168956705af88af21a9f17905a5ffbeb20c1dd1b06a51651165f2a0cb9e1c5ac2936563a2c4ddae91236119a1c0bc8320752583f6235a703cefb46a70830c94bb25dc5199281923c484cb2e00854d2ab405de92154ba9dd75fc4db9d2afa0036c48626e75f53f249b2fac62bd19eea41e521e38bc4afb3ba5372d43310aaaa38e2d9b7f5d37dd05016c71bda73cf07f35273e92444f10aa88c644dad252f7b5f80fd643bc407658b16ef4a6249c1544992bd65c860a4d74a58450ce6515acb1e64a815b49c37dad1abbcc917ed2786a1a6887d7b42634d4c283388eb7279264c3dc025a90a57a2a82c23afab04452fae7217123b2de3124e5347c9c542d8024e43f6f9bbd993ed9bbb633b530d3a30c61dd3572d11489981da97aeec948aefa75989d557fb20c74ee4d4396e6142eeb48fa7f032d94d3e0b8a74429de23ca930b781630e06f49e61ecc078870b9109091b3b47094d1a5247a4340f66d7f53fc16f1df17ac36df92164659fa2907191b09595ef6ba98a6824240c441b8de2873b5d08cbf106c15c6fc54c121f007cfadd8895425643360ba499d85d2c1539f56a270ba14309317e6554b30b07b24b381230a22a73a95fa7c11cf68a16248ea4be9cd91a7523726dfe85a4db30bd7ecf3513709bdb03550ab162c06a595584a6da90fc8d2933e68e1586512a2713f5db3a660dc36e0161c5e74a6e25f3185c08a4391fca0c311d72582902e9060301d808716d82ae812ed61582563b4ed2513b98d4c8dd79ae4d131142feef523261a7686d81bb36cd87d7eda98a1f3d364ec8bd8a4750a78f77e075e5856f05aab5278ed6c66230672435b0269123c676f0a0209371aca102d80d6ce7bcc56ac6d3e060834d38f820d9bf10808e715983551ebae7eccf1cb983737a5b36a7602756148f8eb6472e27aec52a6a0cf31a4fc9c7ac3b4eafd5d7d67254f04bb96581e8e535c8112cf6fea608de2930503601b282fc98578a89c79ca85abce3225cb50fcf8adf8065df24d62dc07159d7ecdb67b6b20fcb666e59d3a520787d9add295d77f84d7920d11b3d8f1a7ad3fe50568e545b37cb48877567eddcd695d06eb46ca69b629ee72bb00867ca9d36e83b61ce203db086211fe55bff82d24b6e287658f2e22052431fdcfc9a3b45cbe962cb59aee528932bc68e703003105935248266fd3ad49d827e8aa2c634bcaf4ab1deac046b84d0813bc455c0f11361e53100a6b7bdf3ea9ebdea9c5ae70395a859f4b67a39ea59a43419e728a4e4bafcd39c710aae61d71ea96af88ffeef9dd48a9dd087cc10f1c44e22c610b1ebe394feac59d2e2e88258fdf0291e178800b2905bc0a95553ba8bef64f7c86c43c8d2e1a79363189188c333142fc0cd6700ffb03e3c4a2d92aa716ca08045f20c8378d868d5453f475222a9a464773ef9d6a9b0171ec79f03efbd290399a2e4cd85dbb19c8ea085fe613ff1e71d280ad260abf4fd592a42747c130b9d1e07ed6f7966a5b9310434ad4c622574ef0d61423ca5c3ad1d3382dead7b76066b11208d6ff2fd57a79315f2ec012c2853577a71364c4e818a0b365a9fa9b39bfcfaf036a5b64db3b6b575d8067e036a9b6a42474eafb7823c3f8b85d1644c0bfdae9ce5f3e8dbbb9c1ee8bba58f72bbf0d4d12e04f73321652e94f5b27eae214a6d74835ea37e40c55e5e9272222c72587636430fa90aef4c7a665395235bd5fd9605d34d6a79633b212da28cb2abc9230748fbb5225636c64d4a0461a47cb788aa1c040e61260653ccd8e3dad9981a65abb0ff009ec8a13082818ef627fa8017b96889b33c2a98fd548fb02fe5bbcf0c78cc141ebbdd631e8b39dd89eb068d9078e4edf5bc6103cce309c2da5b38e1cadf78464665420d70e314ff13babcf8191086dedd1ace21251680fcfe7f96b495868cf48bc0488bac03cae03a737793152f2d0f42a501ba28256dd441ca5abc03c798261ee0171cd3f466fcfa25645e691d3c8eb6772610751e5fddc8f14048a539f367cf55b4356981477ce66c1de2ebf4e52b6429799a1ea0033278300950e77f2924ce10812b4430e22e14aee682324989972941aab0a60a6e50f2520df730e4999a7ca65f2fde740b8647c0cb93f1c7ec03f788bec74074af21230b0e75468699bad898fff78d1fdccaa828fb5f2a17979393fe4b2274126b04e7f417249e2e41683c4497eb4252a74a3c1f49b39779bc94e7ff6370c7361cc1a0bc00364e5edfe5eca5fb9d4efa76b43446fcb927bcecfcbf1ecd1853b02b6622bd5f2170570a5c888d32ede8c41970b928833057795312cf3c5cd72c31022c202c5b94bc1f028ebb36a25ae46a9aeae84c6778c3f036118dc49a492107a1b25f1f9a536cca6079337a244343f8fd0d593ff7ac5ac5c7635accad5bc87f73337d1295713a65661c77b2ab03a554faa3db2bcc054ad7b5cfda1cc438e1ba09e9ad171881ec7591d847e0c3e6ef32903fb53f5d0ba5ccca8d835861fb4ec72fb116b97bbc68c3f5f0fa2baa24f6d56a62a0d12c59e2bb09f85e57d8c555ecb14fecd59a53d5605ba63d9ded989dda66002742ca15baa3028ed2b5a8d20c6ff433fce8e86dbae07471b73d362abe113a7e661d7488e16b62ed4712ac4e6926dd508dcd606265d7bcec9a88c0fe9ad43e228e1c3d76dad9e1bd98b2262f417875495574f78fa8238e72ceada07a62650e8b1727baeb0da10df74a1c396f3eee2d7445202e32583c377c77cfd10b2d3507b56d1c18b364f2a93d94019b4a59c4f4fb8df0f48d32e7b95223a258595f925faea7f5a6aaa06775a8c1786cd32912293c6d36e8d0cce3fed3aff139982c47b7030e1176829f2903474f6df039044f0f5930f588024599349ae3378dca7c9543151e339c67b14eee591a74c5c9c4fa07e292a92114d80bdfd709df831df6381ac6fed257cd9d5ff884e8e74e94a20b2b5952353afafa543e7f3431e4874718f63cf4c87bd934a7e36cfa7605779f6e335e897592bb0e7a253b86460a3a6e46f08678892c8b7afc6b4feae5ab351005d82616a640dba41b411d012f9e6881e8c2b1699f278f0864b87572311d67b07f27af48175d0949ec86f99d46ba8869b5a361ba42d956ef4438f79b45e724bb589c2972cc3e890b6e4e32cbc6ee840f7334ad2410204b0786f9898f7f79848b61bf7fda028a62caa3f630df64d3513dc3fc1189d5aeabc102f58b984a3b5aa0cefa1623a865e24dffa337c174b13431015c699927a2e2c80cfd8e669092564af0c9c128b3a4d7cd176a650bc5786a1ebe9de30e5faf6ceb8edbb9f4cd1864d8ff22c7dd165444422f374065abcd3ec6334a"}) 18:25:42 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:42 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) r8 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x8) read$ptp(r7, &(0x7f0000006380)=""/118, 0x76) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r9, &(0x7f0000002240)={0x18, 0x0, r10}, 0x18) read$FUSE(r9, &(0x7f0000004300)={0x2020}, 0x2020) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000200)) read$FUSE(r5, &(0x7f00000022c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r6, &(0x7f0000006500)={0x2020}, 0x2020) write$FUSE_LSEEK(r4, &(0x7f0000002240)={0x18}, 0x18) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, r11, {0x80000001}}, 0x18) [ 2527.986454][T26476] binder: 26475:26476 unknown command 873749962 [ 2528.003063][T26476] binder: 26475:26476 ioctl c0306201 20000000 returned -22 [ 2528.022833][T26477] binder: 26474:26477 ioctl c0306201 0 returned -14 18:25:43 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x80, 0x9}, 0x48) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000000)={0x5}) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r2, 0x300, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x22008014) 18:25:43 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) 18:25:43 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x804, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x804, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ca5d14344c360663044000000000"], 0x0, 0x0, 0x0}) 18:25:43 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:43 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x80, 0x9}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x80, 0x9}, 0x48) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000000)={0x5}) (async) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000000)={0x5}) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r2, 0x300, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x22008014) [ 2528.210225][T26494] binder: 26489:26494 unknown command 873749962 [ 2528.227182][T26494] binder: 26489:26494 ioctl c0306201 20000000 returned -22 [ 2528.240547][T26495] misc userio: Invalid payload size 18:25:43 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x804, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ca5d14344c360663044000000000"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x804, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ca5d14344c360663044000000000"], 0x0, 0x0, 0x0}) (async) 18:25:43 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) [ 2528.275920][T26497] binder: 26496:26497 ioctl c0306201 0 returned -14 18:25:43 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x80, 0x9}, 0x48) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000000)={0x5}) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r2, 0x300, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x22008014) [ 2528.423045][T26505] binder: 26501:26505 unknown command 873749962 [ 2528.432307][T26504] misc userio: Invalid payload size [ 2528.437904][T26505] binder: 26501:26505 ioctl c0306201 20000000 returned -22 [ 2528.463364][T26509] binder: 26501:26509 unknown command 873749962 [ 2528.477877][T26509] binder: 26501:26509 ioctl c0306201 20000000 returned -22 18:25:43 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000040), 0xc1d6, 0x171840) r0 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0663044002000000"], 0x0, 0x0, 0x0}) 18:25:43 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) connect$caif(r1, &(0x7f00000000c0)=@rfm={0x25, 0x80000001, "a52dcc629dc9a250dd2a97410090d868"}, 0x18) 18:25:43 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) 18:25:43 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) r8 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x8) read$ptp(r7, &(0x7f0000006380)=""/118, 0x76) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r9, &(0x7f0000002240)={0x18, 0x0, r10}, 0x18) read$FUSE(r9, &(0x7f0000004300)={0x2020}, 0x2020) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000200)) read$FUSE(r5, &(0x7f00000022c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r6, &(0x7f0000006500)={0x2020}, 0x2020) write$FUSE_LSEEK(r4, &(0x7f0000002240)={0x18}, 0x18) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, r11, {0x80000001}}, 0x18) 18:25:43 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xfffffd99, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/222, 0xde, 0x2, 0x1}, @fda={0x66646185, 0x9, 0x0, 0x3d}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 18:25:43 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) connect$caif(r1, &(0x7f00000000c0)=@rfm={0x25, 0x80000001, "a52dcc629dc9a250dd2a97410090d868"}, 0x18) [ 2528.933234][T26513] misc userio: Invalid payload size 18:25:43 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000140), 0x2) 18:25:44 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:44 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) (async) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xfffffd99, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/222, 0xde, 0x2, 0x1}, @fda={0x66646185, 0x9, 0x0, 0x3d}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 18:25:44 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) connect$caif(r1, &(0x7f00000000c0)=@rfm={0x25, 0x80000001, "a52dcc629dc9a250dd2a97410090d868"}, 0x18) 18:25:44 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000040), 0xc1d6, 0x171840) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0663044002000000"], 0x0, 0x0, 0x0}) 18:25:44 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:44 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000040), 0xc1d6, 0x171840) r0 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0663044002000000"], 0x0, 0x0, 0x0}) [ 2529.275829][T26531] binder: 26530:26531 ioctl c0306201 0 returned -14 18:25:44 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020, 0x0, 0x0}, 0x2020) connect$pptp(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x2, {0x0, @empty}}, 0x1e) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = getpgid(0x0) setpriority(0x2, r3, 0x0) write$FUSE_LK(r2, &(0x7f00000000c0)={0xffffffffffffffb5, 0x0, r1, {{0x4000000001, 0x401, 0x1, r3}}}, 0x28) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r1, {0x6}}, 0x18) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x4000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:44 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xfffffd99, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/222, 0xde, 0x2, 0x1}, @fda={0x66646185, 0x9, 0x0, 0x3d}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) [ 2529.317822][T26536] binder: 26532:26536 ioctl c0306201 0 returned -14 18:25:44 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) r8 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x8) read$ptp(r7, &(0x7f0000006380)=""/118, 0x76) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r9, &(0x7f0000002240)={0x18, 0x0, r10}, 0x18) read$FUSE(r9, &(0x7f0000004300)={0x2020}, 0x2020) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000200)) read$FUSE(r5, &(0x7f00000022c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r6, &(0x7f0000006500)={0x2020}, 0x2020) write$FUSE_LSEEK(r4, &(0x7f0000002240)={0x18}, 0x18) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, r11, {0x80000001}}, 0x18) 18:25:44 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020, 0x0, 0x0}, 0x2020) connect$pptp(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x2, {0x0, @empty}}, 0x1e) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r3 = getpgid(0x0) setpriority(0x2, r3, 0x0) (async) write$FUSE_LK(r2, &(0x7f00000000c0)={0xffffffffffffffb5, 0x0, r1, {{0x4000000001, 0x401, 0x1, r3}}}, 0x28) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r1, {0x6}}, 0x18) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x4000, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:44 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2363044000000000"], 0x0, 0x0, 0x0}) 18:25:44 executing program 2: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) [ 2529.950764][T26546] binder: 26545:26546 unknown command 1074029347 [ 2529.965019][T26546] binder: 26545:26546 ioctl c0306201 20000000 returned -22 18:25:45 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x3c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}, @register_looper], 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:45 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020, 0x0, 0x0}, 0x2020) connect$pptp(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x2, {0x0, @empty}}, 0x1e) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = getpgid(0x0) setpriority(0x2, r3, 0x0) write$FUSE_LK(r2, &(0x7f00000000c0)={0xffffffffffffffb5, 0x0, r1, {{0x4000000001, 0x401, 0x1, r3}}}, 0x28) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r1, {0x6}}, 0x18) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x4000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020}, 0x2020) (async) connect$pptp(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x2, {0x0, @empty}}, 0x1e) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) getpgid(0x0) (async) setpriority(0x2, r3, 0x0) (async) write$FUSE_LK(r2, &(0x7f00000000c0)={0xffffffffffffffb5, 0x0, r1, {{0x4000000001, 0x401, 0x1, r3}}}, 0x28) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r1, {0x6}}, 0x18) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x4000, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 18:25:45 executing program 2: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) 18:25:45 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2363044000000000"], 0x0, 0x0, 0x0}) 18:25:45 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:45 executing program 2: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async, rerun: 32) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) [ 2530.177187][T26557] binder: 26553:26557 unknown command 1074029347 [ 2530.205949][T26557] binder: 26553:26557 ioctl c0306201 20000000 returned -22 18:25:45 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2363044000000000"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2363044000000000"], 0x0, 0x0, 0x0}) (async) 18:25:45 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x60100) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000000c0)='.\x00', 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) [ 2530.299247][T26564] binder: 26560:26564 ioctl c0306201 0 returned -14 [ 2530.331553][T26565] binder: 26563:26565 ioctl c0306201 0 returned -14 [ 2530.385863][T26570] binder: 26568:26570 unknown command 1074029347 [ 2530.405475][T26570] binder: 26568:26570 ioctl c0306201 20000000 returned -22 [ 2530.430476][T26573] binder: 26568:26573 unknown command 1074029347 [ 2530.439298][T26573] binder: 26568:26573 ioctl c0306201 20000000 returned -22 18:25:45 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x8) read$ptp(r6, &(0x7f0000006380)=""/118, 0x76) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r8, &(0x7f0000002240)={0x18, 0x0, r9}, 0x18) read$FUSE(r8, &(0x7f0000004300)={0x2020}, 0x2020) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000200)) read$FUSE(r4, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r5, &(0x7f0000006500)={0x2020}, 0x2020) write$FUSE_LSEEK(r3, &(0x7f0000002240)={0x18}, 0x18) 18:25:45 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x60100) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000000c0)='.\x00', 0x2) (async) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) 18:25:45 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) fanotify_init(0x1, 0x1000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper], 0x0, 0x0, 0x0}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000001c0)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x10000, 0x0, 0x0, 0x35593a, 0x3c8e0c}) 18:25:45 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x2, 0x30, 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:46 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x38, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:46 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x60100) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000000c0)='.\x00', 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) 18:25:46 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x2, 0x30, 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:46 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) fanotify_init(0x1, 0x1000) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper], 0x0, 0x0, 0x0}) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000001c0)) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x10000, 0x0, 0x0, 0x35593a, 0x3c8e0c}) 18:25:46 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:46 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) fanotify_init(0x1, 0x1000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper], 0x0, 0x0, 0x0}) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000006c0)={0x101}) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000001c0)) (async, rerun: 32) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x10000, 0x0, 0x0, 0x35593a, 0x3c8e0c}) 18:25:46 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x2, 0x30, 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00') (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:46 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffffffffffffd, 0x900) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x28000000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000240)={0x7f, 0x80000001, 0x200, 0xfffff800, 0x0, 0x400}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070282ccbc5be5000000012000001800038014000600000000000000eaff0000000000000001"], 0x2c}}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r5, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/186, 0xba, 0x0, 0x3}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}, 0x400}], 0xe3, 0x0, &(0x7f0000000500)="c564a4069bf89efc2c6fc4f435889aca1aa855db5e885110b9ec81db1a6db7ebc85e37347f08e1243202a80afd48dca57ce3fc3cdd11d84816c12a490a36ad14d32fe7939305a07aa10caac2145a1b27abcfb93b38b77edf3e181301d251fdaa95c9ba9cc106ae749edf76e2af890b64e585ddc19ad7c8ebb9eac4e87cba8ed72e87399263abd75d13be33808462bd2049b183620a5fda4ce35d7de76630fb64f4a38ea6fcf7b08371e1fe24d76cd3e6432cff759f4ff7e81c48e15db52963d3c29de269872f1a08039671136c9837a3b2090bb6b53a7ba4023400d8b2e4f4a2fb0758"}) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048091}, 0x44051) [ 2531.316623][T26593] binder: 26591:26593 ioctl c0306201 0 returned -14 [ 2531.320516][T26594] binder: 26592:26594 ioctl c0306201 0 returned -14 18:25:46 executing program 2: ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f00000002c0)={0x3, 0x1, 0x9, 0x0, 0x85, 0x60, 0x9, 0x3, 0x2, 0x9, 0x7f, "d61625ff32e3a5d24ff16bd0a52d6e915e231f454b13c9d6cc98de3e400b149e"}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000300)={0x5, 0x9, 0xd1, 0x8c, 0x2, 0x90, 0xff, 0x7f, 0xe1, 0x4, 0x42, "0c1b99806dfdfe8e9c3f46db8dbdc53914eed33ef84be1fb6a140be97643260f"}) r1 = syz_open_dev$vcsu(&(0x7f0000000340), 0x1, 0x10040) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0], 0x1, 0x80800}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x29, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x2, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/175, 0x0, 0x1, 0x3}, @fd}, &(0x7f0000000200)}, 0x709fe8bf61e4b8eb}, @acquire_done={0x40106309, 0x3}, @request_death, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000180)={0x8}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x100, r2}, 0x0) 18:25:46 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x8) read$ptp(r5, &(0x7f0000006380)=""/118, 0x76) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r7, &(0x7f0000002240)={0x18, 0x0, r8}, 0x18) read$FUSE(r7, &(0x7f0000004300)={0x2020}, 0x2020) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000200)) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r4, &(0x7f0000006500)={0x2020}, 0x2020) 18:25:46 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffffffffffffd, 0x900) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x28000000) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000240)={0x7f, 0x80000001, 0x200, 0xfffff800, 0x0, 0x400}) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070282ccbc5be5000000012000001800038014000600000000000000eaff0000000000000001"], 0x2c}}, 0x0) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r5, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/186, 0xba, 0x0, 0x3}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}, 0x400}], 0xe3, 0x0, &(0x7f0000000500)="c564a4069bf89efc2c6fc4f435889aca1aa855db5e885110b9ec81db1a6db7ebc85e37347f08e1243202a80afd48dca57ce3fc3cdd11d84816c12a490a36ad14d32fe7939305a07aa10caac2145a1b27abcfb93b38b77edf3e181301d251fdaa95c9ba9cc106ae749edf76e2af890b64e585ddc19ad7c8ebb9eac4e87cba8ed72e87399263abd75d13be33808462bd2049b183620a5fda4ce35d7de76630fb64f4a38ea6fcf7b08371e1fe24d76cd3e6432cff759f4ff7e81c48e15db52963d3c29de269872f1a08039671136c9837a3b2090bb6b53a7ba4023400d8b2e4f4a2fb0758"}) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048091}, 0x44051) 18:25:46 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000040)={{&(0x7f0000000480)={'GENERAL\x00', {&(0x7f00000001c0)=@adf_hex={@normal='NumberCyInstances\x00', {0x3}, {&(0x7f0000000100)=@adf_dec={@format={'Cy', '2', 'RingSymTx\x00'}, {0x9}}}}}, {&(0x7f0000000400)={'KERNEL\x00', {&(0x7f0000000340)=@adf_dec={@bank={'Bank', '5', 'CoreAffinity\x00'}, {0x401}, {&(0x7f0000000280)=@adf_str={@format={'Cy', '1', 'RingAsymRx\x00'}, {"bd28eb0948a1f8162f24518887f53c8f0b8cb6b046af55f7eea7671f7c12f04e5b773b554452b6f2170ba511bf023d0b4eef52047a4ed12eb8a52e58d4fac05f"}}}}}}}}}, 0x80}) 18:25:47 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) (async) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000040)={{&(0x7f0000000480)={'GENERAL\x00', {&(0x7f00000001c0)=@adf_hex={@normal='NumberCyInstances\x00', {0x3}, {&(0x7f0000000100)=@adf_dec={@format={'Cy', '2', 'RingSymTx\x00'}, {0x9}}}}}, {&(0x7f0000000400)={'KERNEL\x00', {&(0x7f0000000340)=@adf_dec={@bank={'Bank', '5', 'CoreAffinity\x00'}, {0x401}, {&(0x7f0000000280)=@adf_str={@format={'Cy', '1', 'RingAsymRx\x00'}, {"bd28eb0948a1f8162f24518887f53c8f0b8cb6b046af55f7eea7671f7c12f04e5b773b554452b6f2170ba511bf023d0b4eef52047a4ed12eb8a52e58d4fac05f"}}}}}}}}}, 0x80}) 18:25:47 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x8) read$ptp(r6, &(0x7f0000006380)=""/118, 0x76) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r8, &(0x7f0000002240)={0x18, 0x0, r9}, 0x18) read$FUSE(r8, &(0x7f0000004300)={0x2020}, 0x2020) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000200)) read$FUSE(r4, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r5, &(0x7f0000006500)={0x2020}, 0x2020) write$FUSE_LSEEK(r3, &(0x7f0000002240)={0x18}, 0x18) 18:25:47 executing program 2: ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f00000002c0)={0x3, 0x1, 0x9, 0x0, 0x85, 0x60, 0x9, 0x3, 0x2, 0x9, 0x7f, "d61625ff32e3a5d24ff16bd0a52d6e915e231f454b13c9d6cc98de3e400b149e"}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000300)={0x5, 0x9, 0xd1, 0x8c, 0x2, 0x90, 0xff, 0x7f, 0xe1, 0x4, 0x42, "0c1b99806dfdfe8e9c3f46db8dbdc53914eed33ef84be1fb6a140be97643260f"}) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000300)={0x5, 0x9, 0xd1, 0x8c, 0x2, 0x90, 0xff, 0x7f, 0xe1, 0x4, 0x42, "0c1b99806dfdfe8e9c3f46db8dbdc53914eed33ef84be1fb6a140be97643260f"}) syz_open_dev$vcsu(&(0x7f0000000340), 0x1, 0x10040) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000340), 0x1, 0x10040) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0], 0x1, 0x80800}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x29, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x2, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/175, 0x0, 0x1, 0x3}, @fd}, &(0x7f0000000200)}, 0x709fe8bf61e4b8eb}, @acquire_done={0x40106309, 0x3}, @request_death, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000180)={0x8}) (async) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000180)={0x8}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x100, r2}, 0x0) 18:25:47 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x38, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) 18:25:47 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffffffffffffd, 0x900) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x28000000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000240)={0x7f, 0x80000001, 0x200, 0xfffff800, 0x0, 0x400}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000240)={0x7f, 0x80000001, 0x200, 0xfffff800, 0x0, 0x400}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070282ccbc5be5000000012000001800038014000600000000000000eaff0000000000000001"], 0x2c}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070282ccbc5be5000000012000001800038014000600000000000000eaff0000000000000001"], 0x2c}}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r5, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/186, 0xba, 0x0, 0x3}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}, 0x400}], 0xe3, 0x0, &(0x7f0000000500)="c564a4069bf89efc2c6fc4f435889aca1aa855db5e885110b9ec81db1a6db7ebc85e37347f08e1243202a80afd48dca57ce3fc3cdd11d84816c12a490a36ad14d32fe7939305a07aa10caac2145a1b27abcfb93b38b77edf3e181301d251fdaa95c9ba9cc106ae749edf76e2af890b64e585ddc19ad7c8ebb9eac4e87cba8ed72e87399263abd75d13be33808462bd2049b183620a5fda4ce35d7de76630fb64f4a38ea6fcf7b08371e1fe24d76cd3e6432cff759f4ff7e81c48e15db52963d3c29de269872f1a08039671136c9837a3b2090bb6b53a7ba4023400d8b2e4f4a2fb0758"}) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048091}, 0x44051) 18:25:47 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async, rerun: 64) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) (rerun: 64) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) (async, rerun: 32) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000040)={{&(0x7f0000000480)={'GENERAL\x00', {&(0x7f00000001c0)=@adf_hex={@normal='NumberCyInstances\x00', {0x3}, {&(0x7f0000000100)=@adf_dec={@format={'Cy', '2', 'RingSymTx\x00'}, {0x9}}}}}, {&(0x7f0000000400)={'KERNEL\x00', {&(0x7f0000000340)=@adf_dec={@bank={'Bank', '5', 'CoreAffinity\x00'}, {0x401}, {&(0x7f0000000280)=@adf_str={@format={'Cy', '1', 'RingAsymRx\x00'}, {"bd28eb0948a1f8162f24518887f53c8f0b8cb6b046af55f7eea7671f7c12f04e5b773b554452b6f2170ba511bf023d0b4eef52047a4ed12eb8a52e58d4fac05f"}}}}}}}}}, 0x80}) (rerun: 32) [ 2532.237520][T26622] binder: 26616:26622 ioctl c0306201 0 returned -14 18:25:47 executing program 2: ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f00000002c0)={0x3, 0x1, 0x9, 0x0, 0x85, 0x60, 0x9, 0x3, 0x2, 0x9, 0x7f, "d61625ff32e3a5d24ff16bd0a52d6e915e231f454b13c9d6cc98de3e400b149e"}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000300)={0x5, 0x9, 0xd1, 0x8c, 0x2, 0x90, 0xff, 0x7f, 0xe1, 0x4, 0x42, "0c1b99806dfdfe8e9c3f46db8dbdc53914eed33ef84be1fb6a140be97643260f"}) r1 = syz_open_dev$vcsu(&(0x7f0000000340), 0x1, 0x10040) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0], 0x1, 0x80800}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x29, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x2, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/175, 0x0, 0x1, 0x3}, @fd}, &(0x7f0000000200)}, 0x709fe8bf61e4b8eb}, @acquire_done={0x40106309, 0x3}, @request_death, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000180)={0x8}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x100, r2}, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f00000002c0)={0x3, 0x1, 0x9, 0x0, 0x85, 0x60, 0x9, 0x3, 0x2, 0x9, 0x7f, "d61625ff32e3a5d24ff16bd0a52d6e915e231f454b13c9d6cc98de3e400b149e"}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000300)={0x5, 0x9, 0xd1, 0x8c, 0x2, 0x90, 0xff, 0x7f, 0xe1, 0x4, 0x42, "0c1b99806dfdfe8e9c3f46db8dbdc53914eed33ef84be1fb6a140be97643260f"}) (async) syz_open_dev$vcsu(&(0x7f0000000340), 0x1, 0x10040) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0], 0x1, 0x80800}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x29, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x2, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/175, 0x0, 0x1, 0x3}, @fd}, &(0x7f0000000200)}, 0x709fe8bf61e4b8eb}, @acquire_done={0x40106309, 0x3}, @request_death, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000180)={0x8}) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x100, r2}, 0x0) (async) 18:25:47 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x434080, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:47 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000100)={{0x6, 0x9}, 'port1\x00', 0x30, 0x401, 0x8, 0x8, 0x4, 0x0, 0x1000, 0x0, 0x4, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:47 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x8) read$ptp(r5, &(0x7f0000006380)=""/118, 0x76) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r7, &(0x7f0000002240)={0x18, 0x0, r8}, 0x18) read$FUSE(r7, &(0x7f0000004300)={0x2020}, 0x2020) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000200)) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) 18:25:47 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x434080, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:47 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="cfe76a70688d3409"], 0x0, 0x0, 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) recvmsg$can_j1939(r1, &(0x7f00000005c0)={&(0x7f0000000100), 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)=""/16, 0x10}, {&(0x7f0000000180)=""/247, 0xf7}, {&(0x7f0000000280)=""/157, 0x9d}, {&(0x7f0000000340)=""/135, 0x87}, {&(0x7f0000000400)=""/94, 0x5e}, {&(0x7f0000000480)=""/77, 0x4d}, {&(0x7f0000000500)}], 0x7}, 0x0) 18:25:47 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000100)={{0x6, 0x9}, 'port1\x00', 0x30, 0x401, 0x8, 0x8, 0x4, 0x0, 0x1000, 0x0, 0x4, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) [ 2532.829157][T26643] binder: 26641:26643 unknown command 1886054351 [ 2532.837762][T26643] binder: 26641:26643 ioctl c0306201 20000000 returned -22 18:25:48 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x8) read$ptp(r5, &(0x7f0000006380)=""/118, 0x76) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r7, &(0x7f0000002240)={0x18, 0x0, r8}, 0x18) read$FUSE(r7, &(0x7f0000004300)={0x2020}, 0x2020) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000200)) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r4, &(0x7f0000006500)={0x2020}, 0x2020) 18:25:48 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000006c0)={0x101}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000100)={{0x6, 0x9}, 'port1\x00', 0x30, 0x401, 0x8, 0x8, 0x4, 0x0, 0x1000, 0x0, 0x4, 0x1}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:48 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x434080, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (rerun: 32) 18:25:48 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="cfe76a70688d3409"], 0x0, 0x0, 0x0}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) (async) recvmsg$can_j1939(r1, &(0x7f00000005c0)={&(0x7f0000000100), 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)=""/16, 0x10}, {&(0x7f0000000180)=""/247, 0xf7}, {&(0x7f0000000280)=""/157, 0x9d}, {&(0x7f0000000340)=""/135, 0x87}, {&(0x7f0000000400)=""/94, 0x5e}, {&(0x7f0000000480)=""/77, 0x4d}, {&(0x7f0000000500)}], 0x7}, 0x0) 18:25:48 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x8) read$ptp(r4, &(0x7f0000006380)=""/118, 0x76) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r6, &(0x7f0000002240)={0x18, 0x0, r7}, 0x18) read$FUSE(r6, &(0x7f0000004300)={0x2020}, 0x2020) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000200)) 18:25:48 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x38, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @increfs_done={0x40106308, 0x2}], 0x1000, 0x0, &(0x7f00000001c0)="dbb0188658e34b5f673dfd25363611e7b33842bf3220a47a443525402dc446bfa7dc2d8fd07c15d25daddec4678156925ea7e873b79f006e14b4157dcb346d9fe31c4f45f0c641a835274969a9125d39ca0de0e41170886089aadb32158faa56c7181de9fa9572e5d80456775b3708b24654679867781f1b1dcc9223fad2ca9bd22146dd5ad37d7aa09068e002cf3a85ef05df9cb68c551a6598ea3a6cb4fa79aa4d6d116ad9fb845ac378f343f0169989e99322367dbbf8cd061572d8a904e64c8379eba4c62328cdd48913eef2ab7c3e6ec5d9b2603de216cffb1d35ae4f0d294faf1d52335bac12969970bb5f29740cc02d018af79eab31e68d3748279237adea36fa8e35feb8dbdf2a64a8120eca48bf3a35d3d18e3c0b512a5b165d45009565a02185be4e6942a3481c0050fa820b352fb72e68af1ff2f097c08b77115e55538efd7e3ff5f6523ca0104c67bdc801bc517d748e1745d50a18a4035dfd4ebbdb010e28d824e4202dd7f31d25ec556087c1af2ebd870e112ec7f3c1193362f2f418ca1febf6b482fad6b54a55d8d6264ac5e77b5ca10f6ecae813f509c17372692aa0d2e365c412335a779fc70701c98f98b644b049f7ca73a44255dc30e05ef892cb14ced058e15dea2abfa56f4c6d5504724a950a9e08f6f760b8a628dd4952d0c9583eca9cc8135d917635b129837b5f3c260cae2badd7667bdaa093a9cc65480595c1b0e68a0a5b7b20764c602d848e7b3b7ada383946f80dfbd26c8357a33ad2a75347181cc52e5707f92597514608da1dfcc5aaf57114ddda40133315ef9ac830212e07e257e624b8a0cdbc20e43462dc8116ffa23d8b5f87b17a98791943aa61bfed7e82d2304fda1545b087fd9a342fcd53691a456d04b763e493328d16922c4390e4bbf0f32e7518ab9209da67d06a1f5a0a699778a2e9b8f5bbf27690b5aebd05d636b733922553438b80524e3b105a43ef6eed6670074a1dcf1ae678934bb79522fb20eb00795d8f7634c590f94433eaee247481e4fd8a41416eb4335e46c70fab2f71d7f92ff32b18e228ee8656ae592f34b24eca4571ae5c76f08dca16229109ef26caa96cf13a1c935f887f8351b97eec9f7d3424255d98e4a66f33415fa2a70cc359e600a64eaaf21c7cec32e4365ee818e2630656074ee700635b0e78a9d8418ee1d03d04b520f443f025bfcecc5fed6f8e2f4b4ad77aa657dec398db3af2dfcca23372967bc257b44f167beffcf9d0ad2e47ac1f15da16271f20f37d36950d62616d55b2e6f0c8614545fadb6282d553b17ea5877601e698d8e60f5f15ac4709a7c50aa681f67744f30544c502dae14e5b36f022a1fe6682617614353e631c46e18396f39f7d57dc96a650d3c5a750c214ac19adc0816b4d90afe53be86ce8fa29cb3ad560678c339baebbe8d67d751884cd03f0669e810dc9c169bc726b628f2aed914d7378eb0fa7d27a60195b7c94681f869dd19814262b9c4d53a99bdbd6ca3cda9471caede819b9c94cfdab9d0423128d288498fdc2e6d52bfd81fe7245a95998b87f8aca463d8a67bca457b0a80abc70d0ae81863d4986e770b4576a49eaafa597ab05fe35d21a3d72147438d7da9d06de1ad2659186f769c20818befe043541d1b667211e023d1db8272c0621403cae68e5fcdf6329756728e245d9bb77691e724397e51afbb567265fb8ead2692f76843ffb10bbee55c5314484ad129d354b36d229fc01b79044679f58a98a4a99e67a86d20b6d6fc2eae0b7809743f089c5c53fc95cd21efacf3f455104619c13842f9153dd1de9496bc0be0d35a9aaa920477ce7f1cf48da1badabe159c8ff3137af1d8d5e64a2f3891082147c6894e27d1514065ea51f70d03741cd105dbbc8c71bd5df7e20476081d8f72c1c74fe5306b94167c1ec483c83842cb6b1c010efca4714f67b571154acf8c6937d7a5176adaaec41e10ebccdd7a0eea1f6e77d0fd4032f8fac6e691479e019213792beda4454880cefe27eb9db9f20f030a1620b8c48209d68847910b5c69169bae8f27d406388d940cf89e9443388d0b468ebc3b4f6eceaeec3dd9491a2183f848c06dbc6f24697af5fd16945c12a1431db594a556110e9501b22aa0d7bfcacbb0af89f4bcd6b4f3350b2699e4d628dd448c295113bc6256234b92e5ae4ec8d5bac26a6ba05260997d1222d0f6e9ba05c90e09bcbc145e36a52465d105a11c8273b4c9524d72c746af50bf2c64fb8d3d69115ad903d977f54ee5505abb8a42ac73929f69e278262131acf034858566d44a14101446c58c3748aadb2f9f5f08f45dbaea23d3dbf0005222a8cb4c5544328e69ad8137f4301680daa0a21803cca78c02457a346cd1d78c5283260768bb7255ba54b03c8ed86cfd5b7a9b65c9d9336dafafbc30cd2ebe4a50fe1cd591d4111c4a5624deee50e168956705af88af21a9f17905a5ffbeb20c1dd1b06a51651165f2a0cb9e1c5ac2936563a2c4ddae91236119a1c0bc8320752583f6235a703cefb46a70830c94bb25dc5199281923c484cb2e00854d2ab405de92154ba9dd75fc4db9d2afa0036c48626e75f53f249b2fac62bd19eea41e521e38bc4afb3ba5372d43310aaaa38e2d9b7f5d37dd05016c71bda73cf07f35273e92444f10aa88c644dad252f7b5f80fd643bc407658b16ef4a6249c1544992bd65c860a4d74a58450ce6515acb1e64a815b49c37dad1abbcc917ed2786a1a6887d7b42634d4c283388eb7279264c3dc025a90a57a2a82c23afab04452fae7217123b2de3124e5347c9c542d8024e43f6f9bbd993ed9bbb633b530d3a30c61dd3572d11489981da97aeec948aefa75989d557fb20c74ee4d4396e6142eeb48fa7f032d94d3e0b8a74429de23ca930b781630e06f49e61ecc078870b9109091b3b47094d1a5247a4340f66d7f53fc16f1df17ac36df92164659fa2907191b09595ef6ba98a6824240c441b8de2873b5d08cbf106c15c6fc54c121f007cfadd8895425643360ba499d85d2c1539f56a270ba14309317e6554b30b07b24b381230a22a73a95fa7c11cf68a16248ea4be9cd91a7523726dfe85a4db30bd7ecf3513709bdb03550ab162c06a595584a6da90fc8d2933e68e1586512a2713f5db3a660dc36e0161c5e74a6e25f3185c08a4391fca0c311d72582902e9060301d808716d82ae812ed61582563b4ed2513b98d4c8dd79ae4d131142feef523261a7686d81bb36cd87d7eda98a1f3d364ec8bd8a4750a78f77e075e5856f05aab5278ed6c66230672435b0269123c676f0a0209371aca102d80d6ce7bcc56ac6d3e060834d38f820d9bf10808e715983551ebae7eccf1cb983737a5b36a7602756148f8eb6472e27aec52a6a0cf31a4fc9c7ac3b4eafd5d7d67254f04bb96581e8e535c8112cf6fea608de2930503601b282fc98578a89c79ca85abce3225cb50fcf8adf8065df24d62dc07159d7ecdb67b6b20fcb666e59d3a520787d9add295d77f84d7920d11b3d8f1a7ad3fe50568e545b37cb48877567eddcd695d06eb46ca69b629ee72bb00867ca9d36e83b61ce203db086211fe55bff82d24b6e287658f2e22052431fdcfc9a3b45cbe962cb59aee528932bc68e703003105935248266fd3ad49d827e8aa2c634bcaf4ab1deac046b84d0813bc455c0f11361e53100a6b7bdf3ea9ebdea9c5ae70395a859f4b67a39ea59a43419e728a4e4bafcd39c710aae61d71ea96af88ffeef9dd48a9dd087cc10f1c44e22c610b1ebe394feac59d2e2e88258fdf0291e178800b2905bc0a95553ba8bef64f7c86c43c8d2e1a79363189188c333142fc0cd6700ffb03e3c4a2d92aa716ca08045f20c8378d868d5453f475222a9a464773ef9d6a9b0171ec79f03efbd290399a2e4cd85dbb19c8ea085fe613ff1e71d280ad260abf4fd592a42747c130b9d1e07ed6f7966a5b9310434ad4c622574ef0d61423ca5c3ad1d3382dead7b76066b11208d6ff2fd57a79315f2ec012c2853577a71364c4e818a0b365a9fa9b39bfcfaf036a5b64db3b6b575d8067e036a9b6a42474eafb7823c3f8b85d1644c0bfdae9ce5f3e8dbbb9c1ee8bba58f72bbf0d4d12e04f73321652e94f5b27eae214a6d74835ea37e40c55e5e9272222c72587636430fa90aef4c7a665395235bd5fd9605d34d6a79633b212da28cb2abc9230748fbb5225636c64d4a0461a47cb788aa1c040e61260653ccd8e3dad9981a65abb0ff009ec8a13082818ef627fa8017b96889b33c2a98fd548fb02fe5bbcf0c78cc141ebbdd631e8b39dd89eb068d9078e4edf5bc6103cce309c2da5b38e1cadf78464665420d70e314ff13babcf8191086dedd1ace21251680fcfe7f96b495868cf48bc0488bac03cae03a737793152f2d0f42a501ba28256dd441ca5abc03c798261ee0171cd3f466fcfa25645e691d3c8eb6772610751e5fddc8f14048a539f367cf55b4356981477ce66c1de2ebf4e52b6429799a1ea0033278300950e77f2924ce10812b4430e22e14aee682324989972941aab0a60a6e50f2520df730e4999a7ca65f2fde740b8647c0cb93f1c7ec03f788bec74074af21230b0e75468699bad898fff78d1fdccaa828fb5f2a17979393fe4b2274126b04e7f417249e2e41683c4497eb4252a74a3c1f49b39779bc94e7ff6370c7361cc1a0bc00364e5edfe5eca5fb9d4efa76b43446fcb927bcecfcbf1ecd1853b02b6622bd5f2170570a5c888d32ede8c41970b928833057795312cf3c5cd72c31022c202c5b94bc1f028ebb36a25ae46a9aeae84c6778c3f036118dc49a492107a1b25f1f9a536cca6079337a244343f8fd0d593ff7ac5ac5c7635accad5bc87f73337d1295713a65661c77b2ab03a554faa3db2bcc054ad7b5cfda1cc438e1ba09e9ad171881ec7591d847e0c3e6ef32903fb53f5d0ba5ccca8d835861fb4ec72fb116b97bbc68c3f5f0fa2baa24f6d56a62a0d12c59e2bb09f85e57d8c555ecb14fecd59a53d5605ba63d9ded989dda66002742ca15baa3028ed2b5a8d20c6ff433fce8e86dbae07471b73d362abe113a7e661d7488e16b62ed4712ac4e6926dd508dcd606265d7bcec9a88c0fe9ad43e228e1c3d76dad9e1bd98b2262f417875495574f78fa8238e72ceada07a62650e8b1727baeb0da10df74a1c396f3eee2d7445202e32583c377c77cfd10b2d3507b56d1c18b364f2a93d94019b4a59c4f4fb8df0f48d32e7b95223a258595f925faea7f5a6aaa06775a8c1786cd32912293c6d36e8d0cce3fed3aff139982c47b7030e1176829f2903474f6df039044f0f5930f588024599349ae3378dca7c9543151e339c67b14eee591a74c5c9c4fa07e292a92114d80bdfd709df831df6381ac6fed257cd9d5ff884e8e74e94a20b2b5952353afafa543e7f3431e4874718f63cf4c87bd934a7e36cfa7605779f6e335e897592bb0e7a253b86460a3a6e46f08678892c8b7afc6b4feae5ab351005d82616a640dba41b411d012f9e6881e8c2b1699f278f0864b87572311d67b07f27af48175d0949ec86f99d46ba8869b5a361ba42d956ef4438f79b45e724bb589c2972cc3e890b6e4e32cbc6ee840f7334ad2410204b0786f9898f7f79848b61bf7fda028a62caa3f630df64d3513dc3fc1189d5aeabc102f58b984a3b5aa0cefa1623a865e24dffa337c174b13431015c699927a2e2c80cfd8e669092564af0c9c128b3a4d7cd176a650bc5786a1ebe9de30e5faf6ceb8edbb9f4cd1864d8ff22c7dd165444422f374065abcd3ec6334a"}) 18:25:48 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendto$rose(0xffffffffffffffff, &(0x7f0000000180)="6b12011f70596cd3591427b2f5ac8f17ee927247c4e57fbc4cb78a485a27ba673578cbdfb57019e9b2067b8699d5265d53f2a66584dde358ff9c45d422341c02bbbaa6342bb68990a2b8cd74d6be8482c5f850510a7516543a6f4c91", 0x5c, 0x40, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x141) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000000c0)={{0x8, 0xff}, 'port0\x00', 0x1, 0x20, 0x7fff, 0x5f74, 0x1f, 0x6be2, 0x8001, 0x0, 0x5, 0x3f}) 18:25:48 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="b7f2ffffffffffff30da72d4e63e4ae13e1cbe79a082b275adff93ea91ae193180e1bfeaf782415b43e65c93e7a230ca31cb7d0686b7695c62ecea1014ed7a5e2fa760a47652ed3b796ad34a79827ad911708cb7be46a7c804bcde6c8a0b77b6f4a2c05a6b65dc93d5a9a2ee89410e4ac545a526bef9dbcafb36cce96f575e27be03f75acca9c190b93c"], 0x0, 0x0, 0x0}) [ 2533.184928][T26656] binder: 26653:26656 unknown command 1886054351 [ 2533.196369][T26659] binder: 26655:26659 ioctl c0306201 0 returned -14 [ 2533.218325][T26656] binder: 26653:26656 ioctl c0306201 20000000 returned -22 18:25:48 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x8) read$ptp(r4, &(0x7f0000006380)=""/118, 0x76) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r6, &(0x7f0000002240)={0x18, 0x0, r7}, 0x18) read$FUSE(r6, &(0x7f0000004300)={0x2020}, 0x2020) 18:25:48 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="cfe76a70688d3409"], 0x0, 0x0, 0x0}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) (async, rerun: 32) recvmsg$can_j1939(r1, &(0x7f00000005c0)={&(0x7f0000000100), 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)=""/16, 0x10}, {&(0x7f0000000180)=""/247, 0xf7}, {&(0x7f0000000280)=""/157, 0x9d}, {&(0x7f0000000340)=""/135, 0x87}, {&(0x7f0000000400)=""/94, 0x5e}, {&(0x7f0000000480)=""/77, 0x4d}, {&(0x7f0000000500)}], 0x7}, 0x0) (rerun: 32) 18:25:48 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x8) read$ptp(r4, &(0x7f0000006380)=""/118, 0x76) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r6, &(0x7f0000002240)={0x18, 0x0, r7}, 0x18) 18:25:48 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendto$rose(0xffffffffffffffff, &(0x7f0000000180)="6b12011f70596cd3591427b2f5ac8f17ee927247c4e57fbc4cb78a485a27ba673578cbdfb57019e9b2067b8699d5265d53f2a66584dde358ff9c45d422341c02bbbaa6342bb68990a2b8cd74d6be8482c5f850510a7516543a6f4c91", 0x5c, 0x40, 0x0, 0x0) (async) sendto$rose(0xffffffffffffffff, &(0x7f0000000180)="6b12011f70596cd3591427b2f5ac8f17ee927247c4e57fbc4cb78a485a27ba673578cbdfb57019e9b2067b8699d5265d53f2a66584dde358ff9c45d422341c02bbbaa6342bb68990a2b8cd74d6be8482c5f850510a7516543a6f4c91", 0x5c, 0x40, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x141) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000000c0)={{0x8, 0xff}, 'port0\x00', 0x1, 0x20, 0x7fff, 0x5f74, 0x1f, 0x6be2, 0x8001, 0x0, 0x5, 0x3f}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000000c0)={{0x8, 0xff}, 'port0\x00', 0x1, 0x20, 0x7fff, 0x5f74, 0x1f, 0x6be2, 0x8001, 0x0, 0x5, 0x3f}) [ 2533.401952][T26671] binder: 26666:26671 unknown command 4294963895 [ 2533.412449][T26672] binder: 26670:26672 unknown command 1886054351 [ 2533.419439][T26671] binder: 26666:26671 ioctl c0306201 20000000 returned -22 [ 2533.439379][T26672] binder: 26670:26672 ioctl c0306201 20000000 returned -22 18:25:49 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendto$rose(0xffffffffffffffff, &(0x7f0000000180)="6b12011f70596cd3591427b2f5ac8f17ee927247c4e57fbc4cb78a485a27ba673578cbdfb57019e9b2067b8699d5265d53f2a66584dde358ff9c45d422341c02bbbaa6342bb68990a2b8cd74d6be8482c5f850510a7516543a6f4c91", 0x5c, 0x40, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x141) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000000c0)={{0x8, 0xff}, 'port0\x00', 0x1, 0x20, 0x7fff, 0x5f74, 0x1f, 0x6be2, 0x8001, 0x0, 0x5, 0x3f}) 18:25:49 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="b7f2ffffffffffff30da72d4e63e4ae13e1cbe79a082b275adff93ea91ae193180e1bfeaf782415b43e65c93e7a230ca31cb7d0686b7695c62ecea1014ed7a5e2fa760a47652ed3b796ad34a79827ad911708cb7be46a7c804bcde6c8a0b77b6f4a2c05a6b65dc93d5a9a2ee89410e4ac545a526bef9dbcafb36cce96f575e27be03f75acca9c190b93c"], 0x0, 0x0, 0x0}) 18:25:49 executing program 0: ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = eventfd2(0x0, 0x0) write$eventfd(r1, &(0x7f0000000080), 0x8) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040)=r1, 0x1) 18:25:49 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) sendto$rose(0xffffffffffffffff, &(0x7f0000000180)="6b12011f70596cd3591427b2f5ac8f17ee927247c4e57fbc4cb78a485a27ba673578cbdfb57019e9b2067b8699d5265d53f2a66584dde358ff9c45d422341c02bbbaa6342bb68990a2b8cd74d6be8482c5f850510a7516543a6f4c91", 0x5c, 0x40, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x141) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000000c0)={{0x8, 0xff}, 'port0\x00', 0x1, 0x20, 0x7fff, 0x5f74, 0x1f, 0x6be2, 0x8001, 0x0, 0x5, 0x3f}) 18:25:49 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x8) read$ptp(r4, &(0x7f0000006380)=""/118, 0x76) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) 18:25:49 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x28, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @register_looper], 0x1000, 0x0, &(0x7f00000001c0)="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"}) [ 2534.148629][T26683] binder: 26682:26683 unknown command 4294963895 [ 2534.155024][T26685] binder: 26681:26685 ioctl c0306201 0 returned -14 [ 2534.175036][T26683] binder: 26682:26683 ioctl c0306201 20000000 returned -22 18:25:49 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="b7f2ffffffffffff30da72d4e63e4ae13e1cbe79a082b275adff93ea91ae193180e1bfeaf782415b43e65c93e7a230ca31cb7d0686b7695c62ecea1014ed7a5e2fa760a47652ed3b796ad34a79827ad911708cb7be46a7c804bcde6c8a0b77b6f4a2c05a6b65dc93d5a9a2ee89410e4ac545a526bef9dbcafb36cce96f575e27be03f75acca9c190b93c"], 0x0, 0x0, 0x0}) 18:25:49 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:49 executing program 0: ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) eventfd2(0x0, 0x0) (async) r1 = eventfd2(0x0, 0x0) write$eventfd(r1, &(0x7f0000000080), 0x8) (async) write$eventfd(r1, &(0x7f0000000080), 0x8) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040)=r1, 0x1) 18:25:49 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x8) read$ptp(r3, &(0x7f0000006380)=""/118, 0x76) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 18:25:49 executing program 5: ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = eventfd2(0x0, 0x0) write$eventfd(r1, &(0x7f0000000080), 0x8) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040)=r1, 0x1) 18:25:49 executing program 0: ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = eventfd2(0x0, 0x0) write$eventfd(r1, &(0x7f0000000080), 0x8) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040)=r1, 0x1) [ 2534.345578][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 2534.352026][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 [ 2534.382361][T26697] binder: 26694:26697 unknown command 4294963895 18:25:49 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x8) read$ptp(r3, &(0x7f0000006380)=""/118, 0x76) [ 2534.434314][T26697] binder: 26694:26697 ioctl c0306201 20000000 returned -22 18:25:49 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:49 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xc67e1c0c81b1fa99, 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0}) 18:25:49 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x8) read$ptp(r5, &(0x7f0000006380)=""/118, 0x76) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r7, &(0x7f0000002240)={0x18, 0x0, r8}, 0x18) read$FUSE(r7, &(0x7f0000004300)={0x2020}, 0x2020) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000200)) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r4, &(0x7f0000006500)={0x2020}, 0x2020) 18:25:49 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x12b940, 0x0) read$ptp(r1, &(0x7f0000000100)=""/74, 0x4a) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, &(0x7f0000000500)={'\x00', 0x8, 0x3, 0x9}) getitimer(0x2, &(0x7f00000002c0)) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000180)={0x8}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f0000000180)={0x8}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r5, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xd0, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x7, 0x0, 0x2c}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/128, 0x80, 0x1, 0x1d}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}}, @clear_death, @request_death={0x400c630e, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="85616466009471fa00000009000000000000000200000000000000300000000000000085616466000000000a0000000000000002000000000000003700000000000000852a646600000000a043c45e04aa4079cf9e634a786acac794ae55a80cf2e215e9962653271705c1cbcbcfbc28196a9a23ac0266901dd7d02a61f906e9abd44eb866148cfb5e2109ca10b7ed3f2a158c1d412b3ffc55f90ea0a83c3837399525b04bb675b7caa287524a8b89afcc0d68cdda607db43b0cc34b1216da", @ANYRES32=r5, @ANYBLOB='\x00'/12], &(0x7f00000000c0)={0x0, 0x20, 0x40}}}, @register_looper, @increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x1}, @decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) [ 2534.685893][T26712] binder: 26709:26712 unknown command 3 [ 2534.710530][T26712] binder: 26709:26712 ioctl c0306201 20000000 returned -22 18:25:49 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:49 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x8) 18:25:49 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xc67e1c0c81b1fa99, 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0}) 18:25:49 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x12b940, 0x0) (rerun: 64) read$ptp(r1, &(0x7f0000000100)=""/74, 0x4a) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, &(0x7f0000000500)={'\x00', 0x8, 0x3, 0x9}) (async) getitimer(0x2, &(0x7f00000002c0)) (async) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000180)={0x8}) (async, rerun: 64) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f0000000180)={0x8}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r5, 0x3b80, &(0x7f0000000180)={0x8}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xd0, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x7, 0x0, 0x2c}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/128, 0x80, 0x1, 0x1d}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}}, @clear_death, @request_death={0x400c630e, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="85616466009471fa00000009000000000000000200000000000000300000000000000085616466000000000a0000000000000002000000000000003700000000000000852a646600000000a043c45e04aa4079cf9e634a786acac794ae55a80cf2e215e9962653271705c1cbcbcfbc28196a9a23ac0266901dd7d02a61f906e9abd44eb866148cfb5e2109ca10b7ed3f2a158c1d412b3ffc55f90ea0a83c3837399525b04bb675b7caa287524a8b89afcc0d68cdda607db43b0cc34b1216da", @ANYRES32=r5, @ANYBLOB='\x00'/12], &(0x7f00000000c0)={0x0, 0x20, 0x40}}}, @register_looper, @increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x1}, @decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) (rerun: 32) 18:25:50 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x14, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}, @register_looper], 0x1000, 0x0, &(0x7f00000001c0)="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"}) [ 2535.054494][T26720] binder: 26718:26720 unknown command 3 [ 2535.067682][T26720] binder: 26718:26720 ioctl c0306201 20000000 returned -22 18:25:50 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, 0x0) 18:25:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xc67e1c0c81b1fa99, 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0}) 18:25:50 executing program 4: connect$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000000)={0x5, 0x1, 'client1\x00', 0x80000007, "ac8e75e4a6930c90", "60a9ddcab49cff13eab17b8c5889afdca4e937215a26a093c0a9956fa4069ab6", 0x81, 0x5}) [ 2535.151658][T26727] binder: 26726:26727 ioctl c0306201 0 returned -14 18:25:50 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x12b940, 0x0) read$ptp(r1, &(0x7f0000000100)=""/74, 0x4a) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, &(0x7f0000000500)={'\x00', 0x8, 0x3, 0x9}) getitimer(0x2, &(0x7f00000002c0)) (async) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000180)={0x8}) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f0000000180)={0x8}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r5, 0x3b80, &(0x7f0000000180)={0x8}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xd0, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x7, 0x0, 0x2c}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/128, 0x80, 0x1, 0x1d}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}}, @clear_death, @request_death={0x400c630e, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="85616466009471fa00000009000000000000000200000000000000300000000000000085616466000000000a0000000000000002000000000000003700000000000000852a646600000000a043c45e04aa4079cf9e634a786acac794ae55a80cf2e215e9962653271705c1cbcbcfbc28196a9a23ac0266901dd7d02a61f906e9abd44eb866148cfb5e2109ca10b7ed3f2a158c1d412b3ffc55f90ea0a83c3837399525b04bb675b7caa287524a8b89afcc0d68cdda607db43b0cc34b1216da", @ANYRES32=r5, @ANYBLOB='\x00'/12], &(0x7f00000000c0)={0x0, 0x20, 0x40}}}, @register_looper, @increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x1}, @decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) 18:25:50 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) [ 2535.248734][T26733] binder: 26732:26733 unknown command 3 [ 2535.285771][T26733] binder: 26732:26733 ioctl c0306201 20000000 returned -22 18:25:50 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, 0x0) 18:25:50 executing program 4: connect$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000006c0)={0x101}) (async) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000100)) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000000)={0x5, 0x1, 'client1\x00', 0x80000007, "ac8e75e4a6930c90", "60a9ddcab49cff13eab17b8c5889afdca4e937215a26a093c0a9956fa4069ab6", 0x81, 0x5}) 18:25:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x50, 0x0, &(0x7f0000001180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001100)={@fda={0x66646185, 0xa, 0x2, 0x40}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/4096, 0x1000, 0x1, 0x15}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}}, &(0x7f0000000040)={0x0, 0x20, 0x48}}}, @register_looper], 0x0, 0x0, 0x0}) 18:25:50 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffec0, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x713, 0x46a200) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000100)) 18:25:50 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000006340), 0x406442, 0x0) 18:25:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x50, 0x0, &(0x7f0000001180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001100)={@fda={0x66646185, 0xa, 0x2, 0x40}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/4096, 0x1000, 0x1, 0x15}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}}, &(0x7f0000000040)={0x0, 0x20, 0x48}}}, @register_looper], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x50, 0x0, &(0x7f0000001180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001100)={@fda={0x66646185, 0xa, 0x2, 0x40}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/4096, 0x1000, 0x1, 0x15}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}}, &(0x7f0000000040)={0x0, 0x20, 0x48}}}, @register_looper], 0x0, 0x0, 0x0}) (async) 18:25:50 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x1000, 0x0, &(0x7f00000001c0)="dbb0188658e34b5f673dfd25363611e7b33842bf3220a47a443525402dc446bfa7dc2d8fd07c15d25daddec4678156925ea7e873b79f006e14b4157dcb346d9fe31c4f45f0c641a835274969a9125d39ca0de0e41170886089aadb32158faa56c7181de9fa9572e5d80456775b3708b24654679867781f1b1dcc9223fad2ca9bd22146dd5ad37d7aa09068e002cf3a85ef05df9cb68c551a6598ea3a6cb4fa79aa4d6d116ad9fb845ac378f343f0169989e99322367dbbf8cd061572d8a904e64c8379eba4c62328cdd48913eef2ab7c3e6ec5d9b2603de216cffb1d35ae4f0d294faf1d52335bac12969970bb5f29740cc02d018af79eab31e68d3748279237adea36fa8e35feb8dbdf2a64a8120eca48bf3a35d3d18e3c0b512a5b165d45009565a02185be4e6942a3481c0050fa820b352fb72e68af1ff2f097c08b77115e55538efd7e3ff5f6523ca0104c67bdc801bc517d748e1745d50a18a4035dfd4ebbdb010e28d824e4202dd7f31d25ec556087c1af2ebd870e112ec7f3c1193362f2f418ca1febf6b482fad6b54a55d8d6264ac5e77b5ca10f6ecae813f509c17372692aa0d2e365c412335a779fc70701c98f98b644b049f7ca73a44255dc30e05ef892cb14ced058e15dea2abfa56f4c6d5504724a950a9e08f6f760b8a628dd4952d0c9583eca9cc8135d917635b129837b5f3c260cae2badd7667bdaa093a9cc65480595c1b0e68a0a5b7b20764c602d848e7b3b7ada383946f80dfbd26c8357a33ad2a75347181cc52e5707f92597514608da1dfcc5aaf57114ddda40133315ef9ac830212e07e257e624b8a0cdbc20e43462dc8116ffa23d8b5f87b17a98791943aa61bfed7e82d2304fda1545b087fd9a342fcd53691a456d04b763e493328d16922c4390e4bbf0f32e7518ab9209da67d06a1f5a0a699778a2e9b8f5bbf27690b5aebd05d636b733922553438b80524e3b105a43ef6eed6670074a1dcf1ae678934bb79522fb20eb00795d8f7634c590f94433eaee247481e4fd8a41416eb4335e46c70fab2f71d7f92ff32b18e228ee8656ae592f34b24eca4571ae5c76f08dca16229109ef26caa96cf13a1c935f887f8351b97eec9f7d3424255d98e4a66f33415fa2a70cc359e600a64eaaf21c7cec32e4365ee818e2630656074ee700635b0e78a9d8418ee1d03d04b520f443f025bfcecc5fed6f8e2f4b4ad77aa657dec398db3af2dfcca23372967bc257b44f167beffcf9d0ad2e47ac1f15da16271f20f37d36950d62616d55b2e6f0c8614545fadb6282d553b17ea5877601e698d8e60f5f15ac4709a7c50aa681f67744f30544c502dae14e5b36f022a1fe6682617614353e631c46e18396f39f7d57dc96a650d3c5a750c214ac19adc0816b4d90afe53be86ce8fa29cb3ad560678c339baebbe8d67d751884cd03f0669e810dc9c169bc726b628f2aed914d7378eb0fa7d27a60195b7c94681f869dd19814262b9c4d53a99bdbd6ca3cda9471caede819b9c94cfdab9d0423128d288498fdc2e6d52bfd81fe7245a95998b87f8aca463d8a67bca457b0a80abc70d0ae81863d4986e770b4576a49eaafa597ab05fe35d21a3d72147438d7da9d06de1ad2659186f769c20818befe043541d1b667211e023d1db8272c0621403cae68e5fcdf6329756728e245d9bb77691e724397e51afbb567265fb8ead2692f76843ffb10bbee55c5314484ad129d354b36d229fc01b79044679f58a98a4a99e67a86d20b6d6fc2eae0b7809743f089c5c53fc95cd21efacf3f455104619c13842f9153dd1de9496bc0be0d35a9aaa920477ce7f1cf48da1badabe159c8ff3137af1d8d5e64a2f3891082147c6894e27d1514065ea51f70d03741cd105dbbc8c71bd5df7e20476081d8f72c1c74fe5306b94167c1ec483c83842cb6b1c010efca4714f67b571154acf8c6937d7a5176adaaec41e10ebccdd7a0eea1f6e77d0fd4032f8fac6e691479e019213792beda4454880cefe27eb9db9f20f030a1620b8c48209d68847910b5c69169bae8f27d406388d940cf89e9443388d0b468ebc3b4f6eceaeec3dd9491a2183f848c06dbc6f24697af5fd16945c12a1431db594a556110e9501b22aa0d7bfcacbb0af89f4bcd6b4f3350b2699e4d628dd448c295113bc6256234b92e5ae4ec8d5bac26a6ba05260997d1222d0f6e9ba05c90e09bcbc145e36a52465d105a11c8273b4c9524d72c746af50bf2c64fb8d3d69115ad903d977f54ee5505abb8a42ac73929f69e278262131acf034858566d44a14101446c58c3748aadb2f9f5f08f45dbaea23d3dbf0005222a8cb4c5544328e69ad8137f4301680daa0a21803cca78c02457a346cd1d78c5283260768bb7255ba54b03c8ed86cfd5b7a9b65c9d9336dafafbc30cd2ebe4a50fe1cd591d4111c4a5624deee50e168956705af88af21a9f17905a5ffbeb20c1dd1b06a51651165f2a0cb9e1c5ac2936563a2c4ddae91236119a1c0bc8320752583f6235a703cefb46a70830c94bb25dc5199281923c484cb2e00854d2ab405de92154ba9dd75fc4db9d2afa0036c48626e75f53f249b2fac62bd19eea41e521e38bc4afb3ba5372d43310aaaa38e2d9b7f5d37dd05016c71bda73cf07f35273e92444f10aa88c644dad252f7b5f80fd643bc407658b16ef4a6249c1544992bd65c860a4d74a58450ce6515acb1e64a815b49c37dad1abbcc917ed2786a1a6887d7b42634d4c283388eb7279264c3dc025a90a57a2a82c23afab04452fae7217123b2de3124e5347c9c542d8024e43f6f9bbd993ed9bbb633b530d3a30c61dd3572d11489981da97aeec948aefa75989d557fb20c74ee4d4396e6142eeb48fa7f032d94d3e0b8a74429de23ca930b781630e06f49e61ecc078870b9109091b3b47094d1a5247a4340f66d7f53fc16f1df17ac36df92164659fa2907191b09595ef6ba98a6824240c441b8de2873b5d08cbf106c15c6fc54c121f007cfadd8895425643360ba499d85d2c1539f56a270ba14309317e6554b30b07b24b381230a22a73a95fa7c11cf68a16248ea4be9cd91a7523726dfe85a4db30bd7ecf3513709bdb03550ab162c06a595584a6da90fc8d2933e68e1586512a2713f5db3a660dc36e0161c5e74a6e25f3185c08a4391fca0c311d72582902e9060301d808716d82ae812ed61582563b4ed2513b98d4c8dd79ae4d131142feef523261a7686d81bb36cd87d7eda98a1f3d364ec8bd8a4750a78f77e075e5856f05aab5278ed6c66230672435b0269123c676f0a0209371aca102d80d6ce7bcc56ac6d3e060834d38f820d9bf10808e715983551ebae7eccf1cb983737a5b36a7602756148f8eb6472e27aec52a6a0cf31a4fc9c7ac3b4eafd5d7d67254f04bb96581e8e535c8112cf6fea608de2930503601b282fc98578a89c79ca85abce3225cb50fcf8adf8065df24d62dc07159d7ecdb67b6b20fcb666e59d3a520787d9add295d77f84d7920d11b3d8f1a7ad3fe50568e545b37cb48877567eddcd695d06eb46ca69b629ee72bb00867ca9d36e83b61ce203db086211fe55bff82d24b6e287658f2e22052431fdcfc9a3b45cbe962cb59aee528932bc68e703003105935248266fd3ad49d827e8aa2c634bcaf4ab1deac046b84d0813bc455c0f11361e53100a6b7bdf3ea9ebdea9c5ae70395a859f4b67a39ea59a43419e728a4e4bafcd39c710aae61d71ea96af88ffeef9dd48a9dd087cc10f1c44e22c610b1ebe394feac59d2e2e88258fdf0291e178800b2905bc0a95553ba8bef64f7c86c43c8d2e1a79363189188c333142fc0cd6700ffb03e3c4a2d92aa716ca08045f20c8378d868d5453f475222a9a464773ef9d6a9b0171ec79f03efbd290399a2e4cd85dbb19c8ea085fe613ff1e71d280ad260abf4fd592a42747c130b9d1e07ed6f7966a5b9310434ad4c622574ef0d61423ca5c3ad1d3382dead7b76066b11208d6ff2fd57a79315f2ec012c2853577a71364c4e818a0b365a9fa9b39bfcfaf036a5b64db3b6b575d8067e036a9b6a42474eafb7823c3f8b85d1644c0bfdae9ce5f3e8dbbb9c1ee8bba58f72bbf0d4d12e04f73321652e94f5b27eae214a6d74835ea37e40c55e5e9272222c72587636430fa90aef4c7a665395235bd5fd9605d34d6a79633b212da28cb2abc9230748fbb5225636c64d4a0461a47cb788aa1c040e61260653ccd8e3dad9981a65abb0ff009ec8a13082818ef627fa8017b96889b33c2a98fd548fb02fe5bbcf0c78cc141ebbdd631e8b39dd89eb068d9078e4edf5bc6103cce309c2da5b38e1cadf78464665420d70e314ff13babcf8191086dedd1ace21251680fcfe7f96b495868cf48bc0488bac03cae03a737793152f2d0f42a501ba28256dd441ca5abc03c798261ee0171cd3f466fcfa25645e691d3c8eb6772610751e5fddc8f14048a539f367cf55b4356981477ce66c1de2ebf4e52b6429799a1ea0033278300950e77f2924ce10812b4430e22e14aee682324989972941aab0a60a6e50f2520df730e4999a7ca65f2fde740b8647c0cb93f1c7ec03f788bec74074af21230b0e75468699bad898fff78d1fdccaa828fb5f2a17979393fe4b2274126b04e7f417249e2e41683c4497eb4252a74a3c1f49b39779bc94e7ff6370c7361cc1a0bc00364e5edfe5eca5fb9d4efa76b43446fcb927bcecfcbf1ecd1853b02b6622bd5f2170570a5c888d32ede8c41970b928833057795312cf3c5cd72c31022c202c5b94bc1f028ebb36a25ae46a9aeae84c6778c3f036118dc49a492107a1b25f1f9a536cca6079337a244343f8fd0d593ff7ac5ac5c7635accad5bc87f73337d1295713a65661c77b2ab03a554faa3db2bcc054ad7b5cfda1cc438e1ba09e9ad171881ec7591d847e0c3e6ef32903fb53f5d0ba5ccca8d835861fb4ec72fb116b97bbc68c3f5f0fa2baa24f6d56a62a0d12c59e2bb09f85e57d8c555ecb14fecd59a53d5605ba63d9ded989dda66002742ca15baa3028ed2b5a8d20c6ff433fce8e86dbae07471b73d362abe113a7e661d7488e16b62ed4712ac4e6926dd508dcd606265d7bcec9a88c0fe9ad43e228e1c3d76dad9e1bd98b2262f417875495574f78fa8238e72ceada07a62650e8b1727baeb0da10df74a1c396f3eee2d7445202e32583c377c77cfd10b2d3507b56d1c18b364f2a93d94019b4a59c4f4fb8df0f48d32e7b95223a258595f925faea7f5a6aaa06775a8c1786cd32912293c6d36e8d0cce3fed3aff139982c47b7030e1176829f2903474f6df039044f0f5930f588024599349ae3378dca7c9543151e339c67b14eee591a74c5c9c4fa07e292a92114d80bdfd709df831df6381ac6fed257cd9d5ff884e8e74e94a20b2b5952353afafa543e7f3431e4874718f63cf4c87bd934a7e36cfa7605779f6e335e897592bb0e7a253b86460a3a6e46f08678892c8b7afc6b4feae5ab351005d82616a640dba41b411d012f9e6881e8c2b1699f278f0864b87572311d67b07f27af48175d0949ec86f99d46ba8869b5a361ba42d956ef4438f79b45e724bb589c2972cc3e890b6e4e32cbc6ee840f7334ad2410204b0786f9898f7f79848b61bf7fda028a62caa3f630df64d3513dc3fc1189d5aeabc102f58b984a3b5aa0cefa1623a865e24dffa337c174b13431015c699927a2e2c80cfd8e669092564af0c9c128b3a4d7cd176a650bc5786a1ebe9de30e5faf6ceb8edbb9f4cd1864d8ff22c7dd165444422f374065abcd3ec6334a"}) 18:25:50 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffec0, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) syz_open_dev$vcsu(&(0x7f0000000040), 0x713, 0x46a200) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x713, 0x46a200) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000100)) 18:25:50 executing program 4: connect$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000100)) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000000)={0x5, 0x1, 'client1\x00', 0x80000007, "ac8e75e4a6930c90", "60a9ddcab49cff13eab17b8c5889afdca4e937215a26a093c0a9956fa4069ab6", 0x81, 0x5}) 18:25:50 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 18:25:50 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x434080, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x50, 0x0, &(0x7f0000001180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001100)={@fda={0x66646185, 0xa, 0x2, 0x40}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/4096, 0x1000, 0x1, 0x15}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}}, &(0x7f0000000040)={0x0, 0x20, 0x48}}}, @register_looper], 0x0, 0x0, 0x0}) 18:25:51 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f0000000100)={"12bb20c0edffa4dde99f0239c70be68b072200a734878c70676815d1765a", 0xf5, 0x4, 0xfffffeff, [0x401, 0xebd4, 0x2e, 0x1, 0x8, 0x7, 0x16e, 0xffffc000, 0x9, 0x7, 0x5, 0x800, 0x2, 0x80000000, 0x3, 0x9f9, 0x6, 0x1]}) 18:25:51 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffec0, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x713, 0x46a200) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000100)) 18:25:51 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffffffffffffd, 0x900) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x28000000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000240)={0x7f, 0x80000001, 0x200, 0xfffff800, 0x0, 0x400}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070282ccbc5be5000000012000001800038014000600000000000000eaff0000000000000001"], 0x2c}}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r5, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/186, 0xba, 0x0, 0x3}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}, 0x400}], 0xe3, 0x0, &(0x7f0000000500)="c564a4069bf89efc2c6fc4f435889aca1aa855db5e885110b9ec81db1a6db7ebc85e37347f08e1243202a80afd48dca57ce3fc3cdd11d84816c12a490a36ad14d32fe7939305a07aa10caac2145a1b27abcfb93b38b77edf3e181301d251fdaa95c9ba9cc106ae749edf76e2af890b64e585ddc19ad7c8ebb9eac4e87cba8ed72e87399263abd75d13be33808462bd2049b183620a5fda4ce35d7de76630fb64f4a38ea6fcf7b08371e1fe24d76cd3e6432cff759f4ff7e81c48e15db52963d3c29de269872f1a08039671136c9837a3b2090bb6b53a7ba4023400d8b2e4f4a2fb0758"}) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048091}, 0x44051) 18:25:51 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000000)=0x1000, 0x4) geteuid() 18:25:51 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002280)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80800}) [ 2536.149481][T26769] binder: 26768:26769 ioctl c0306201 0 returned -14 18:25:51 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f0000000100)={"12bb20c0edffa4dde99f0239c70be68b072200a734878c70676815d1765a", 0xf5, 0x4, 0xfffffeff, [0x401, 0xebd4, 0x2e, 0x1, 0x8, 0x7, 0x16e, 0xffffc000, 0x9, 0x7, 0x5, 0x800, 0x2, 0x80000000, 0x3, 0x9f9, 0x6, 0x1]}) 18:25:51 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x0, 0x0, 0x0}) 18:25:51 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async, rerun: 32) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000000)=0x1000, 0x4) (async) geteuid() 18:25:51 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000000)=0x1000, 0x4) geteuid() 18:25:51 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2000, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000100)={0x2014, r0}, 0x0) 18:25:51 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 18:25:51 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f0000000100)={"12bb20c0edffa4dde99f0239c70be68b072200a734878c70676815d1765a", 0xf5, 0x4, 0xfffffeff, [0x401, 0xebd4, 0x2e, 0x1, 0x8, 0x7, 0x16e, 0xffffc000, 0x9, 0x7, 0x5, 0x800, 0x2, 0x80000000, 0x3, 0x9f9, 0x6, 0x1]}) 18:25:52 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x1, 0x115100) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000006c0)={0xfe, 0x0, {0x3, 0x2, 0xfffff000}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000100)={{0x3f, 0x3}, 'port0\x00', 0x21, 0x60008, 0x0, 0xfffff001, 0x7fffffff, 0xffffffff, 0x8ed, 0x0, 0x6, 0x81}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0, 0x0, 0x0}) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x0, {0x80000001}}, 0x18) 18:25:52 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2000, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000100)={0x2014, r0}, 0x0) 18:25:52 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000000)=0x1000, 0x4) geteuid() 18:25:52 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) [ 2537.140343][T26795] binder: 26793:26795 ioctl c0306201 0 returned -14 18:25:52 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x0, 0x0, 0x0}) 18:25:52 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000000)=0x1000, 0x4) (async) geteuid() 18:25:52 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000000)=0x1000, 0x4) geteuid() 18:25:52 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2000, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000100)={0x2014, r0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) landlock_create_ruleset(&(0x7f0000000040)={0x2000, 0x3}, 0x10, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000100)={0x2014, r0}, 0x0) (async) [ 2537.325912][T26801] binder: 26796:26801 unknown command 0 [ 2537.331556][T26801] binder: 26796:26801 ioctl c0306201 20000000 returned -22 [ 2537.379705][T26804] binder: 26802:26804 ioctl c0306201 0 returned -14 18:25:52 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x1, 0x115100) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000200)) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000006c0)={0xfe, 0x0, {0x3, 0x2, 0xfffff000}}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000100)={{0x3f, 0x3}, 'port0\x00', 0x21, 0x60008, 0x0, 0xfffff001, 0x7fffffff, 0xffffffff, 0x8ed, 0x0, 0x6, 0x81}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0, 0x0, 0x0}) (async) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x0, {0x80000001}}, 0x18) 18:25:52 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x0, 0x0, 0x0}) 18:25:52 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) 18:25:52 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000000)=0x1000, 0x4) 18:25:52 executing program 0: syz_io_uring_setup(0x4a2, &(0x7f0000000100)={0x0, 0xbbcd, 0x0, 0x2, 0x2a4}, &(0x7f0000000180), &(0x7f00000001c0)) r0 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) r1 = eventfd2(0x0, 0x0) write$eventfd(r1, &(0x7f0000000080), 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000200)=r1, 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="066304400000000000060000000caf328400004135709b4bcdab"], 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) 18:25:52 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x524c0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0x3ff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2537.599313][T26817] binder: 26815:26817 ioctl c0306201 0 returned -14 18:25:52 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, r2], 0x3, 0x800}) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) 18:25:52 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x0, 0x0, &(0x7f00000001c0)}) [ 2537.639787][T26819] binder: 26814:26819 unknown command 0 [ 2537.669404][T26819] binder: 26814:26819 ioctl c0306201 20000000 returned -22 18:25:52 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000000)=0x1000, 0x4) 18:25:52 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x524c0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0x3ff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:52 executing program 0: syz_io_uring_setup(0x4a2, &(0x7f0000000100)={0x0, 0xbbcd, 0x0, 0x2, 0x2a4}, &(0x7f0000000180), &(0x7f00000001c0)) syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) r1 = eventfd2(0x0, 0x0) write$eventfd(r1, &(0x7f0000000080), 0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000200)=r1, 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="066304400000000000060000000caf328400004135709b4bcdab"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="066304400000000000060000000caf328400004135709b4bcdab"], 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) 18:25:52 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x1, 0x115100) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000006c0)={0xfe, 0x0, {0x3, 0x2, 0xfffff000}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000100)={{0x3f, 0x3}, 'port0\x00', 0x21, 0x60008, 0x0, 0xfffff001, 0x7fffffff, 0xffffffff, 0x8ed, 0x0, 0x6, 0x81}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0, 0x0, 0x0}) (async) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x0, {0x80000001}}, 0x18) [ 2537.838760][T26830] binder: 26828:26830 ioctl c0306201 0 returned -14 18:25:52 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000006400)={'\x00', 0x7fff, 0x1, 0x7}) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) 18:25:52 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x0, 0x0, &(0x7f00000001c0)}) 18:25:52 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x524c0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0x3ff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:52 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000000)=0x1000, 0x4) 18:25:53 executing program 0: syz_io_uring_setup(0x4a2, &(0x7f0000000100)={0x0, 0xbbcd, 0x0, 0x2, 0x2a4}, &(0x7f0000000180), &(0x7f00000001c0)) (async, rerun: 32) r0 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) (rerun: 32) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) (async, rerun: 64) r1 = eventfd2(0x0, 0x0) (rerun: 64) write$eventfd(r1, &(0x7f0000000080), 0x8) (async, rerun: 64) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000200)=r1, 0x1) (rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="066304400000000000060000000caf328400004135709b4bcdab"], 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) [ 2537.958653][T26838] binder: 26832:26838 unknown command 0 [ 2537.982465][T26838] binder: 26832:26838 ioctl c0306201 20000000 returned -22 18:25:53 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1f64489e1b1526cc, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="a1f08b12150e0f19e67d8c7f4622cb43edcc6a85c38e80a30c0201f18635"], 0x0, 0x0, 0x0}) [ 2538.071774][T26844] binder: 26842:26844 ioctl c0306201 0 returned -14 18:25:53 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) 18:25:53 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x0, 0x0, &(0x7f00000001c0)}) 18:25:53 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000140)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x80002) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) write$FUSE_OPEN(r2, &(0x7f00000000c0)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x10}}, 0x20) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000040)) 18:25:53 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000000)=0x1000, 0x4) 18:25:53 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1f64489e1b1526cc, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="a1f08b12150e0f19e67d8c7f4622cb43edcc6a85c38e80a30c0201f18635"], 0x0, 0x0, 0x0}) 18:25:53 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000006480)=ANY=[@ANYBLOB="06630440000071fd34f2341058ef008397967876fd10338102a31036b2611da7da49a7ed2d165db598b2433abfdf656620bfa87b811b5539286f0f464779cf16d2056005f692fe1f50c9435610213a29627608a051f7090212674ac54daf22f4d045457c573fa74f706227d679"], 0x0, 0x0, 0x0}) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) 18:25:53 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) [ 2538.336215][T26861] binder: 26858:26861 ioctl c0306201 0 returned -14 18:25:53 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x800, 0x0, &(0x7f00000001c0)="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"}) 18:25:53 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000140)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x80002) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) write$FUSE_OPEN(r2, &(0x7f00000000c0)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x10}}, 0x20) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000140)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x80002) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) (async) write$FUSE_OPEN(r2, &(0x7f00000000c0)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x10}}, 0x20) (async) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000040)) (async) 18:25:53 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0x1000, 0x4) 18:25:53 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) 18:25:53 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1f64489e1b1526cc, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="a1f08b12150e0f19e67d8c7f4622cb43edcc6a85c38e80a30c0201f18635"], 0x0, 0x0, 0x0}) 18:25:53 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) [ 2538.568663][T26878] binder: 26872:26878 ioctl c0306201 0 returned -14 18:25:53 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000140)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x80002) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) (async) write$FUSE_OPEN(r2, &(0x7f00000000c0)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x10}}, 0x20) (async) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000040)) 18:25:53 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0x1000, 0x4) 18:25:53 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000000c0)=[@exit_looper], 0x0, 0x0, 0x0}) 18:25:53 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) 18:25:53 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:53 executing program 4: ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f00000000c0)={0x81, 0x6, 0xfffffffffffffff9, 0x81, "4fae0309d6837fd68853fb2898660c6dc8970757bce6edce034a83cc3db02bad562c6302eb30fe74994062820240472c086f0f6eec9257c2d26f0f424f761f12256a0c8d90335aed4db31c3b1c716291974a748295e802764e5cc33f802d349243cfea634f61dc2ba1"}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000780), 0xc0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:54 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000011c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/4096, 0x1000, 0x2, 0x11}, @fda={0x66646185, 0x7, 0x0, 0x2b}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/26, 0x1a, 0x1, 0x25}}, &(0x7f0000001180)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 18:25:54 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000000c0)=[@exit_looper], 0x0, 0x0, 0x0}) 18:25:54 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) 18:25:54 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000000)=0x1000, 0x4) 18:25:54 executing program 4: ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f00000000c0)={0x81, 0x6, 0xfffffffffffffff9, 0x81, "4fae0309d6837fd68853fb2898660c6dc8970757bce6edce034a83cc3db02bad562c6302eb30fe74994062820240472c086f0f6eec9257c2d26f0f424f761f12256a0c8d90335aed4db31c3b1c716291974a748295e802764e5cc33f802d349243cfea634f61dc2ba1"}) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000780), 0xc0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:54 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x0, 0x0, &(0x7f00000001c0)}) 18:25:54 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000011c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/4096, 0x1000, 0x2, 0x11}, @fda={0x66646185, 0x7, 0x0, 0x2b}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/26, 0x1a, 0x1, 0x25}}, &(0x7f0000001180)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 18:25:54 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) 18:25:54 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000000)=0x1000, 0x4) 18:25:54 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000000c0)=[@exit_looper], 0x0, 0x0, 0x0}) [ 2539.545926][T26910] binder: 26908:26910 ioctl c0306201 0 returned -14 18:25:54 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x0, 0x0, &(0x7f00000001c0)}) 18:25:54 executing program 4: ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f00000000c0)={0x81, 0x6, 0xfffffffffffffff9, 0x81, "4fae0309d6837fd68853fb2898660c6dc8970757bce6edce034a83cc3db02bad562c6302eb30fe74994062820240472c086f0f6eec9257c2d26f0f424f761f12256a0c8d90335aed4db31c3b1c716291974a748295e802764e5cc33f802d349243cfea634f61dc2ba1"}) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000780), 0xc0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:54 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x10000, 0x0, 0x80}) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) 18:25:54 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, r1}, 0x0) 18:25:54 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000011c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/4096, 0x1000, 0x2, 0x11}, @fda={0x66646185, 0x7, 0x0, 0x2b}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/26, 0x1a, 0x1, 0x25}}, &(0x7f0000001180)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 18:25:54 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000000)=0x1000, 0x4) [ 2539.762270][T26922] binder: 26920:26922 ioctl c0306201 0 returned -14 18:25:54 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x0, 0x0, &(0x7f00000001c0)}) 18:25:54 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) 18:25:54 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00042dbd7000ffdbdf25000600000000000000000000b62e7f8cb6b5018f06fd1a0dfed192a791ab92e0428ecf9bc3932a6f77b55212b5e16422483f74e5fed25fe3177d74a89fdfbc6f0e4eae0f068f661bd82c3ddbd66ba6f151fcd530b0ac3591259a9117a5151e6ba43519348f00498a3b326bd735b189e2a3fc1be3a6c7eaeb8688d49e3e7a788f32293d8750db0124d988afd3e3b312e16483c174049070191f0d11247ede8377d15d7515662b9f45f50000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x8010) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f00000001c0)='\x00', 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004041}, 0x20004041) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vcsu(&(0x7f0000000680), 0xda49, 0x276900) syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r5) r6 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x800) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, &(0x7f0000000300)={0x1, 0x3aa0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x6c, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done, @clear_death={0x400c630f, 0x2}, @dead_binder_done], 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x2c, r9, 0x207, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x84, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x4}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)) 18:25:54 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) [ 2539.957555][T26934] binder: 26930:26934 ioctl c0306201 0 returned -14 18:25:55 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, r1}, 0x0) 18:25:55 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x400, 0x0, &(0x7f00000001c0)="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"}) 18:25:55 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x1000, 0x4) 18:25:55 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:55 executing program 3: read$ptp(0xffffffffffffffff, &(0x7f0000000140)=""/52, 0x34) read$ptp(0xffffffffffffffff, &(0x7f00000000c0)=""/12, 0xc) 18:25:55 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x1) (async) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00042dbd7000ffdbdf25000600000000000000000000b62e7f8cb6b5018f06fd1a0dfed192a791ab92e0428ecf9bc3932a6f77b55212b5e16422483f74e5fed25fe3177d74a89fdfbc6f0e4eae0f068f661bd82c3ddbd66ba6f151fcd530b0ac3591259a9117a5151e6ba43519348f00498a3b326bd735b189e2a3fc1be3a6c7eaeb8688d49e3e7a788f32293d8750db0124d988afd3e3b312e16483c174049070191f0d11247ede8377d15d7515662b9f45f50000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x8010) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f00000001c0)='\x00', 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004041}, 0x20004041) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsu(&(0x7f0000000680), 0xda49, 0x276900) (async) r5 = syz_open_dev$vcsu(&(0x7f0000000680), 0xda49, 0x276900) syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r5) r6 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x800) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, &(0x7f0000000300)={0x1, 0x3aa0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x6c, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done, @clear_death={0x400c630f, 0x2}, @dead_binder_done], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x6c, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done, @clear_death={0x400c630f, 0x2}, @dead_binder_done], 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x1) (async) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x2c, r9, 0x207, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x2c}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x2c, r9, 0x207, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x84, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x4}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x84, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x4}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)) [ 2540.158672][T26944] binder: 26942:26944 ioctl c0306201 0 returned -14 18:25:55 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, r1}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000180)={0x8}) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, r1}, 0x0) (async) 18:25:55 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x1000, 0x4) 18:25:55 executing program 3: read$ptp(0xffffffffffffffff, &(0x7f0000000140)=""/52, 0x34) read$ptp(0xffffffffffffffff, &(0x7f00000000c0)=""/12, 0xc) 18:25:55 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 18:25:55 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e793f535090f6114"], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000580)) r2 = syz_open_dev$vcsu(&(0x7f0000000540), 0x0, 0xc2) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, 0x0) recvmsg$can_j1939(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/247, 0xf7}, {&(0x7f0000000040)=""/62, 0x3e}, {&(0x7f0000000300)=""/101, 0x65}], 0x4, &(0x7f00000003c0)=""/227, 0xe3}, 0x102) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0xc0000, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) 18:25:55 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x1) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00042dbd7000ffdbdf25000600000000000000000000b62e7f8cb6b5018f06fd1a0dfed192a791ab92e0428ecf9bc3932a6f77b55212b5e16422483f74e5fed25fe3177d74a89fdfbc6f0e4eae0f068f661bd82c3ddbd66ba6f151fcd530b0ac3591259a9117a5151e6ba43519348f00498a3b326bd735b189e2a3fc1be3a6c7eaeb8688d49e3e7a788f32293d8750db0124d988afd3e3b312e16483c174049070191f0d11247ede8377d15d7515662b9f45f50000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x8010) (async, rerun: 64) r3 = socket$rxrpc(0x21, 0x2, 0xa) (rerun: 64) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f00000001c0)='\x00', 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004041}, 0x20004041) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_open_dev$vcsu(&(0x7f0000000680), 0xda49, 0x276900) syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r5) (async) r6 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x800) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, &(0x7f0000000300)={0x1, 0x3aa0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x6c, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done, @clear_death={0x400c630f, 0x2}, @dead_binder_done], 0x0, 0x0, 0x0}) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x1) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x2c, r9, 0x207, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x2c}}, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x84, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x4}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)) 18:25:55 executing program 3: read$ptp(0xffffffffffffffff, &(0x7f0000000140)=""/52, 0x34) read$ptp(0xffffffffffffffff, &(0x7f00000000c0)=""/12, 0xc) [ 2540.565595][T26970] binder: 26967:26970 unknown command 905286631 [ 2540.589956][T26970] binder: 26967:26970 ioctl c0306201 20000000 returned -22 18:25:55 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x0, 0x0, &(0x7f00000001c0)}) 18:25:55 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06cf91e9581ac8a863044000000000"], 0x0, 0x0, 0x0}) 18:25:55 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x1000, 0x4) 18:25:55 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) 18:25:55 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e793f535090f6114"], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000006c0)={0x101}) (async) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000580)) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000540), 0x0, 0xc2) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, 0x0) (async) recvmsg$can_j1939(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/247, 0xf7}, {&(0x7f0000000040)=""/62, 0x3e}, {&(0x7f0000000300)=""/101, 0x65}], 0x4, &(0x7f00000003c0)=""/227, 0xe3}, 0x102) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0xc0000, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) 18:25:55 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) setpriority(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x58, 0x0, &(0x7f0000000000)=[@dead_binder_done, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) 18:25:56 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) setpriority(0x0, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x58, 0x0, &(0x7f0000000000)=[@dead_binder_done, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) 18:25:56 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, 0x0) 18:25:56 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) [ 2541.086913][T26980] binder: 26978:26980 unknown command 3918647046 [ 2541.093334][T26980] binder: 26978:26980 ioctl c0306201 20000000 returned -22 [ 2541.121445][T26986] binder: 26985:26986 ioctl c0306201 0 returned -14 [ 2541.129117][T26984] binder: 26983:26984 unknown command 905286631 18:25:56 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06cf91e9581ac8a863044000000000"], 0x0, 0x0, 0x0}) 18:25:56 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) setpriority(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000700), 0xcd, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x58, 0x0, &(0x7f0000000000)=[@dead_binder_done, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) [ 2541.160497][T26984] binder: 26983:26984 ioctl c0306201 20000000 returned -22 18:25:56 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x0, 0x0, &(0x7f00000001c0)}) 18:25:56 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e793f535090f6114"], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000006c0)={0x101}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000580)) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000540), 0x0, 0xc2) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, 0x0) (async) recvmsg$can_j1939(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/247, 0xf7}, {&(0x7f0000000040)=""/62, 0x3e}, {&(0x7f0000000300)=""/101, 0x65}], 0x4, &(0x7f00000003c0)=""/227, 0xe3}, 0x102) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0xc0000, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (rerun: 32) 18:25:56 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, 0x0) [ 2541.338159][T26999] binder: 26995:26999 unknown command 3918647046 [ 2541.357741][T27000] binder: 26998:27000 ioctl c0306201 0 returned -14 18:25:56 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$ptp(r0, &(0x7f0000000140)=""/52, 0x34) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) 18:25:56 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000cc0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:56 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x0, 0x0, &(0x7f00000001c0)}) [ 2541.392442][T26999] binder: 26995:26999 ioctl c0306201 20000000 returned -22 [ 2541.429365][T27007] binder: 27005:27007 unknown command 905286631 18:25:56 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, 0x0) 18:25:56 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06cf91e9581ac8a863044000000000"], 0x0, 0x0, 0x0}) [ 2541.458842][T27007] binder: 27005:27007 ioctl c0306201 20000000 returned -22 18:25:56 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$ptp(0xffffffffffffffff, &(0x7f0000000140)=""/52, 0x34) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) 18:25:56 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="fbffffff04000080"], 0x0, 0x0, 0x0}) 18:25:56 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000cc0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2541.649569][T27022] binder: 27019:27022 unknown command 3918647046 [ 2541.665155][T27018] binder: 27016:27018 ioctl c0306201 0 returned -14 18:25:56 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000), 0x4) 18:25:56 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$ptp(0xffffffffffffffff, &(0x7f0000000140)=""/52, 0x34) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) [ 2541.691579][T27022] binder: 27019:27022 ioctl c0306201 20000000 returned -22 [ 2541.696763][T27026] binder: 27023:27026 unknown command 4294967291 [ 2541.714792][T27026] binder: 27023:27026 ioctl c0306201 20000000 returned -22 18:25:56 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x202000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000100)={{0xff}, 'port0\x00', 0x84, 0x100018, 0x7, 0x400, 0x15, 0x4, 0x0, 0x0, 0x7, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="b0876ea02aba70838a306cc7a5115baeb724bbddcc5b05a36641d38f99f67030d0f13eda99"], 0x0, 0x0, 0x0}) 18:25:56 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000cc0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:56 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x200, 0x0, &(0x7f00000001c0)="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"}) 18:25:56 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="fbffffff04000080"], 0x0, 0x0, 0x0}) 18:25:56 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000), 0x4) 18:25:56 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$ptp(0xffffffffffffffff, &(0x7f0000000140)=""/52, 0x34) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) [ 2541.936397][T27036] binder: 27033:27036 ioctl c0306201 0 returned -14 [ 2541.973075][T27039] binder: 27035:27039 unknown command 4294967291 18:25:57 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$ptp(r0, 0x0, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/12, 0xc) 18:25:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2541.985203][T27038] binder: 27032:27038 unknown command 2691598256 [ 2541.995979][T27038] binder: 27032:27038 ioctl c0306201 20000000 returned -22 [ 2542.003364][T27039] binder: 27035:27039 ioctl c0306201 20000000 returned -22 18:25:57 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x202000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000100)={{0xff}, 'port0\x00', 0x84, 0x100018, 0x7, 0x400, 0x15, 0x4, 0x0, 0x0, 0x7, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="b0876ea02aba70838a306cc7a5115baeb724bbddcc5b05a36641d38f99f67030d0f13eda99"], 0x0, 0x0, 0x0}) 18:25:57 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="fbffffff04000080"], 0x0, 0x0, 0x0}) 18:25:57 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000), 0x4) 18:25:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2542.195785][T27051] binder: 27049:27051 unknown command 2691598256 [ 2542.213994][T27051] binder: 27049:27051 ioctl c0306201 20000000 returned -22 [ 2542.228622][T27055] binder: 27050:27055 unknown command 4294967291 [ 2542.237115][T27055] binder: 27050:27055 ioctl c0306201 20000000 returned -22 18:25:57 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) getrusage(0x0, &(0x7f0000000100)) 18:25:57 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x202000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000100)={{0xff}, 'port0\x00', 0x84, 0x100018, 0x7, 0x400, 0x15, 0x4, 0x0, 0x0, 0x7, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="b0876ea02aba70838a306cc7a5115baeb724bbddcc5b05a36641d38f99f67030d0f13eda99"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x202000) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000100)={{0xff}, 'port0\x00', 0x84, 0x100018, 0x7, 0x400, 0x15, 0x4, 0x0, 0x0, 0x7, 0x1}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="b0876ea02aba70838a306cc7a5115baeb724bbddcc5b05a36641d38f99f67030d0f13eda99"], 0x0, 0x0, 0x0}) (async) [ 2542.407600][T27062] binder: 27061:27062 unknown command 2691598256 [ 2542.419229][T27062] binder: 27061:27062 ioctl c0306201 20000000 returned -22 [ 2542.434242][T27062] binder: 27061:27062 unknown command 2691598256 [ 2542.440724][T27062] binder: 27061:27062 ioctl c0306201 20000000 returned -22 18:25:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:25:57 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000), 0x4) 18:25:57 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) getrusage(0x0, &(0x7f0000000100)) (async) getrusage(0x0, &(0x7f0000000100)) 18:25:57 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) [ 2542.955672][T27048] ================================================================== [ 2542.963804][T27048] BUG: KASAN: slab-use-after-free in ptp_read+0x7c4/0x830 [ 2542.970968][T27048] Read of size 4 at addr ffff88805865d004 by task syz-executor.3/27048 [ 2542.979230][T27048] [ 2542.981571][T27048] CPU: 1 PID: 27048 Comm: syz-executor.3 Not tainted 6.6.0-next-20231103-syzkaller #0 [ 2542.991130][T27048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2543.001208][T27048] Call Trace: [ 2543.004527][T27048] [ 2543.007500][T27048] dump_stack_lvl+0xd9/0x1b0 [ 2543.012131][T27048] print_report+0xc3/0x620 [ 2543.016600][T27048] ? __virt_addr_valid+0x5e/0x580 [ 2543.021658][T27048] ? __phys_addr+0xc6/0x140 [ 2543.026180][T27048] kasan_report+0xd9/0x110 [ 2543.030665][T27048] ? ptp_read+0x7c4/0x830 [ 2543.035023][T27048] ? ptp_read+0x7c4/0x830 [ 2543.039389][T27048] ptp_read+0x7c4/0x830 [ 2543.043582][T27048] ? ptp_poll+0x1b0/0x1b0 [ 2543.047979][T27048] ? cpuusage_read+0x10/0x10 [ 2543.052598][T27048] ? fsnotify_perm.part.0+0x23c/0x5c0 [ 2543.058001][T27048] ? fsnotify_perm.part.0+0x247/0x5c0 [ 2543.063411][T27048] ? apparmor_file_permission+0x255/0x530 [ 2543.069178][T27048] ? ptp_poll+0x1b0/0x1b0 [ 2543.073548][T27048] posix_clock_read+0x138/0x1b0 [ 2543.078447][T27048] ? posix_clock_compat_ioctl+0x30/0x30 [ 2543.084032][T27048] vfs_read+0x1ce/0x8f0 [ 2543.088234][T27048] ? kernel_read+0x1b0/0x1b0 [ 2543.092861][T27048] ? __might_fault+0xe3/0x190 [ 2543.097571][T27048] ? __fget_files+0x1c6/0x340 [ 2543.102293][T27048] ? __fget_light+0xe4/0x260 [ 2543.106925][T27048] ksys_read+0x12f/0x250 [ 2543.111207][T27048] ? vfs_write+0xdf0/0xdf0 [ 2543.115667][T27048] ? syscall_enter_from_user_mode+0x26/0x80 [ 2543.121612][T27048] do_syscall_64+0x3f/0x110 [ 2543.126156][T27048] entry_SYSCALL_64_after_hwframe+0x62/0x6a [ 2543.132095][T27048] RIP: 0033:0x7fc5d987cae9 [ 2543.136537][T27048] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2543.156171][T27048] RSP: 002b:00007fc5da5fc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2543.164610][T27048] RAX: ffffffffffffffda RBX: 00007fc5d999bf80 RCX: 00007fc5d987cae9 [ 2543.172614][T27048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2543.180597][T27048] RBP: 00007fc5d98c847a R08: 0000000000000000 R09: 0000000000000000 [ 2543.188581][T27048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2543.196603][T27048] R13: 000000000000000b R14: 00007fc5d999bf80 R15: 00007ffec669a9f8 [ 2543.204721][T27048] [ 2543.207763][T27048] [ 2543.210093][T27048] Allocated by task 27048: [ 2543.214517][T27048] kasan_save_stack+0x33/0x50 [ 2543.219248][T27048] kasan_set_track+0x24/0x30 [ 2543.223864][T27048] __kasan_kmalloc+0xa2/0xb0 [ 2543.228480][T27048] ptp_open+0xe3/0x4f0 [ 2543.232569][T27048] posix_clock_open+0x17e/0x240 [ 2543.237456][T27048] chrdev_open+0x26d/0x6e0 [ 2543.241897][T27048] do_dentry_open+0x8d4/0x18d0 [ 2543.246682][T27048] path_openat+0x1d49/0x2c40 [ 2543.251293][T27048] do_filp_open+0x1dc/0x430 [ 2543.255817][T27048] do_sys_openat2+0x176/0x1e0 [ 2543.260515][T27048] __x64_sys_openat+0x175/0x210 [ 2543.265394][T27048] do_syscall_64+0x3f/0x110 [ 2543.269937][T27048] entry_SYSCALL_64_after_hwframe+0x62/0x6a [ 2543.275861][T27048] [ 2543.278190][T27048] Freed by task 27053: [ 2543.282263][T27048] kasan_save_stack+0x33/0x50 [ 2543.286968][T27048] kasan_set_track+0x24/0x30 [ 2543.291582][T27048] kasan_save_free_info+0x2b/0x40 [ 2543.296638][T27048] ____kasan_slab_free+0x15b/0x1b0 [ 2543.301773][T27048] slab_free_freelist_hook+0x114/0x1e0 [ 2543.307256][T27048] __kmem_cache_free+0xc0/0x180 [ 2543.312135][T27048] ptp_release+0x204/0x2b0 [ 2543.316580][T27048] ptp_read+0xf6/0x830 [ 2543.320679][T27048] posix_clock_read+0x138/0x1b0 [ 2543.325570][T27048] vfs_read+0x1ce/0x8f0 [ 2543.329762][T27048] ksys_read+0x12f/0x250 [ 2543.334047][T27048] do_syscall_64+0x3f/0x110 [ 2543.338594][T27048] entry_SYSCALL_64_after_hwframe+0x62/0x6a [ 2543.344536][T27048] [ 2543.346866][T27048] The buggy address belongs to the object at ffff88805865c000 [ 2543.346866][T27048] which belongs to the cache kmalloc-8k of size 8192 [ 2543.360932][T27048] The buggy address is located 4100 bytes inside of [ 2543.360932][T27048] freed 8192-byte region [ffff88805865c000, ffff88805865e000) [ 2543.374922][T27048] [ 2543.377263][T27048] The buggy address belongs to the physical page: [ 2543.383680][T27048] page:ffffea0001619600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58658 [ 2543.393849][T27048] head:ffffea0001619600 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2543.402807][T27048] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 2543.411237][T27048] page_type: 0xffffffff() [ 2543.415583][T27048] raw: 00fff00000000840 ffff888013042280 0000000000000000 dead000000000001 [ 2543.424192][T27048] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 2543.432792][T27048] page dumped because: kasan: bad access detected [ 2543.439213][T27048] page_owner tracks the page as allocated [ 2543.444937][T27048] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5105, tgid 5105 (syz-executor.4), ts 121450304676, free_ts 31882288367 [ 2543.466592][T27048] post_alloc_hook+0x2cf/0x340 [ 2543.471388][T27048] get_page_from_freelist+0xa16/0x3680 [ 2543.476878][T27048] __alloc_pages+0x1cf/0x4c0 [ 2543.481498][T27048] alloc_pages_mpol+0x258/0x5f0 [ 2543.486375][T27048] allocate_slab+0x251/0x380 [ 2543.490988][T27048] ___slab_alloc+0x8bf/0x1570 [ 2543.495688][T27048] __slab_alloc.constprop.0+0x56/0xa0 [ 2543.501084][T27048] __kmem_cache_alloc_node+0x131/0x310 [ 2543.506575][T27048] __kmalloc_node+0x56/0x130 [ 2543.511202][T27048] kvmalloc_node+0x6f/0x1a0 [ 2543.515741][T27048] pfifo_fast_init+0x125/0x3a0 [ 2543.520612][T27048] qdisc_create_dflt+0x101/0x3f0 [ 2543.525582][T27048] dev_activate+0x66c/0x1310 [ 2543.530200][T27048] __dev_open+0x383/0x4d0 [ 2543.534549][T27048] __dev_change_flags+0x56a/0x730 [ 2543.539600][T27048] dev_change_flags+0x9a/0x170 [ 2543.544390][T27048] page last free stack trace: [ 2543.549073][T27048] free_unref_page_prepare+0x4f8/0xa90 [ 2543.554564][T27048] free_unref_page+0x33/0x3b0 [ 2543.559271][T27048] free_contig_range+0xb6/0x190 [ 2543.564152][T27048] destroy_args+0x7c9/0xa10 [ 2543.568733][T27048] debug_vm_pgtable+0x1d51/0x40f0 [ 2543.573784][T27048] do_one_initcall+0x128/0x670 [ 2543.578616][T27048] kernel_init_freeable+0x5bc/0x8f0 [ 2543.583871][T27048] kernel_init+0x1c/0x2a0 [ 2543.588225][T27048] ret_from_fork+0x45/0x80 [ 2543.592668][T27048] ret_from_fork_asm+0x11/0x20 [ 2543.597464][T27048] [ 2543.599811][T27048] Memory state around the buggy address: [ 2543.605450][T27048] ffff88805865cf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2543.613534][T27048] ffff88805865cf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2543.621621][T27048] >ffff88805865d000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2543.629695][T27048] ^ [ 2543.633775][T27048] ffff88805865d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2543.641854][T27048] ffff88805865d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2543.649930][T27048] ================================================================== [ 2543.675231][T27048] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2543.682485][T27048] CPU: 1 PID: 27048 Comm: syz-executor.3 Not tainted 6.6.0-next-20231103-syzkaller #0 [ 2543.692080][T27048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2543.702177][T27048] Call Trace: [ 2543.705498][T27048] [ 2543.708467][T27048] dump_stack_lvl+0xd9/0x1b0 [ 2543.713132][T27048] panic+0x6dc/0x790 [ 2543.717091][T27048] ? panic_smp_self_stop+0xa0/0xa0 [ 2543.722284][T27048] ? preempt_schedule_thunk+0x1a/0x30 [ 2543.727722][T27048] ? preempt_schedule_common+0x44/0xc0 [ 2543.733431][T27048] check_panic_on_warn+0xab/0xb0 [ 2543.738432][T27048] end_report+0x117/0x160 [ 2543.742986][T27048] kasan_report+0xe9/0x110 [ 2543.747440][T27048] ? ptp_read+0x7c4/0x830 [ 2543.751802][T27048] ? ptp_read+0x7c4/0x830 [ 2543.756174][T27048] ptp_read+0x7c4/0x830 [ 2543.760398][T27048] ? ptp_poll+0x1b0/0x1b0 [ 2543.764762][T27048] ? cpuusage_read+0x10/0x10 [ 2543.769398][T27048] ? fsnotify_perm.part.0+0x23c/0x5c0 [ 2543.774801][T27048] ? fsnotify_perm.part.0+0x247/0x5c0 [ 2543.780201][T27048] ? apparmor_file_permission+0x255/0x530 [ 2543.785968][T27048] ? ptp_poll+0x1b0/0x1b0 [ 2543.790328][T27048] posix_clock_read+0x138/0x1b0 [ 2543.795219][T27048] ? posix_clock_compat_ioctl+0x30/0x30 [ 2543.800805][T27048] vfs_read+0x1ce/0x8f0 [ 2543.805003][T27048] ? kernel_read+0x1b0/0x1b0 [ 2543.809634][T27048] ? __might_fault+0xe3/0x190 [ 2543.814348][T27048] ? __fget_files+0x1c6/0x340 [ 2543.819065][T27048] ? __fget_light+0xe4/0x260 [ 2543.823707][T27048] ksys_read+0x12f/0x250 [ 2543.828016][T27048] ? vfs_write+0xdf0/0xdf0 [ 2543.832490][T27048] ? syscall_enter_from_user_mode+0x26/0x80 [ 2543.838431][T27048] do_syscall_64+0x3f/0x110 [ 2543.842988][T27048] entry_SYSCALL_64_after_hwframe+0x62/0x6a [ 2543.848925][T27048] RIP: 0033:0x7fc5d987cae9 [ 2543.853365][T27048] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2543.873013][T27048] RSP: 002b:00007fc5da5fc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2543.881465][T27048] RAX: ffffffffffffffda RBX: 00007fc5d999bf80 RCX: 00007fc5d987cae9 [ 2543.889464][T27048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2543.897458][T27048] RBP: 00007fc5d98c847a R08: 0000000000000000 R09: 0000000000000000 [ 2543.905452][T27048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2543.913442][T27048] R13: 000000000000000b R14: 00007fc5d999bf80 R15: 00007ffec669a9f8 [ 2543.921435][T27048] [ 2543.924750][T27048] Kernel Offset: disabled [ 2543.929093][T27048] Rebooting in 86400 seconds..