VM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [0x80ffff]}) 01:47:02 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x4800]}) 01:47:02 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 592.531128] binder: 27558:27559 ioctl c018620c 0 returned -14 [ 592.549129] binder: 27563:27571 unknown command 536871360 [ 592.569149] binder: 27558:27559 ioctl c018620c 0 returned -14 01:47:02 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x5000000]}) 01:47:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x80000000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000280)={'broute\x00', 0x0, 0x3, 0x77, [], 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000200)=""/119}, &(0x7f0000000080)=0x78) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000340)=0x1d) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 592.575943] binder: 27563:27571 ioctl c0306201 20000040 returned -22 [ 592.628255] binder: 27563:27584 unknown command 536871360 [ 592.642335] binder: 27563:27584 ioctl c0306201 20000040 returned -22 01:47:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000040)=0x3b8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x400}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={r2, @in6={{0xa, 0x4e24, 0x0, @empty, 0x257}}, 0xfd, 0x3, 0x6d, 0x9, 0x9}, &(0x7f0000000500)=0x98) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="527ec3c3258fffd2f18331aaf4a0b24166f487233d88204b12cc4762385e657971148cce532dd1535f7184be", 0x2c}, {&(0x7f00000000c0)="86ded1f3c0cf77aff37eb952d72509f20bb7fbd27f0157aa9f4d4ff4f7d822b78eb88e3769e5753fdcbd00dc2a4d61520c05a5f5e2f883892b4945b59a0d8c45af49b45bc252cd124b75e4ea9f9d840c8cb89675050a2f4dc1fe75df0fb4eb3fd81f17d711ff4b87c7729cb75c929329b4545c34a4eddae8a8", 0x79}, {&(0x7f0000000140)="faca9c0ef82bce5e697010edbfd236f5b88fa3b35327359698d568ff11026c7050cdb6079bf1b1a6d7dba7ca22e762dacca2509da47be4f73c8bc493e8d04732c68cda7182293ae97c389e4a14eef40cc239541164659be9ac5cb5d201e7066aeeac934bb91622fcb41f", 0x6a}], 0x3, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000280)=@req={0x7, 0x81, 0x191, 0x1000}, 0x10) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000380)=""/158, &(0x7f0000000340)=0x9e) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 01:47:02 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) 01:47:02 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x600]}) [ 592.773909] binder: 27594:27596 ioctl c018620c 0 returned -14 [ 592.816619] binder: 27598:27599 unknown command 536871360 [ 592.830662] binder: 27594:27596 ioctl c018620c 0 returned -14 [ 592.840463] binder: 27598:27599 ioctl c0306201 20000040 returned -22 [ 592.863462] binder: 27598:27611 unknown command 536871360 [ 592.886040] binder: 27598:27611 ioctl c0306201 20000040 returned -22 01:47:03 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [0xffff8000]}) 01:47:03 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x6c00]}) 01:47:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) dup(r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20840, 0x0) write$selinux_create(r1, &(0x7f0000000040)=@access={'system_u:object_r:devicekit_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x1}, 0x4a) 01:47:03 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100060"]], 0x0, 0x0, 0x0}) [ 593.440384] binder: 27621:27625 ioctl c018620c 0 returned -14 01:47:03 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x300000000000000]}) 01:47:03 executing program 1: r0 = dup(0xffffffffffffffff) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0xc9, "d5f164fcead26f09f2719d35a5c18c55d80ab1b027fe81bea9ba28c1b83e46f2762be17d1793afc7053fb64623cae9a9fa1d0374ed112a2467cfae4b56bfa081b0a53055a7a0ffdd2a6c29ab02508cfda3276f9ebde2cd14dae2d4a5893e1112a13bb65e8a2aed6331494a7a45747b6ef8f3efdda87520314e9c667909ca7659e61b2662574c0a22d5f473727ad46f34f4390c08c41c3298f1d856fe43e71996d20795fa467fa1838173b15d95995e75a8d3dd1bedbed6c705d3e4758e1fdc407bcd8080d69ee98003"}, &(0x7f0000000080)=0xed) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) [ 593.491244] binder: 27622:27637 unknown command 536871360 [ 593.499299] binder: 27621:27625 ioctl c018620c 0 returned -14 [ 593.529855] binder: 27622:27637 ioctl c0306201 20000040 returned -22 01:47:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xfffffffffffffffd) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x200, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000080)=[0x5, 0x6, 0x2, 0x7], 0x4, 0x7, 0x2000000000000000, 0x8, 0x7, 0x1, {0x3ff, 0x3, 0x10000, 0x9, 0x754, 0xcc, 0x296, 0x0, 0x3, 0x5, 0x9, 0x63, 0xffff, 0xff, "eebac825a2a00b854a434e5bb69fd870dd8db51e254bb04c18b0a12887ad625c"}}) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 01:47:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [0x0, 0xffff8000]}) [ 593.579023] binder: 27622:27637 unknown command 536871360 [ 593.602368] binder: 27622:27637 ioctl c0306201 20000040 returned -22 01:47:03 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) [ 593.826993] binder: 27666:27671 unknown command 536871360 [ 593.848952] binder: 27666:27671 ioctl c0306201 20000040 returned -22 [ 593.867573] binder: 27666:27676 unknown command 536871360 [ 593.873151] binder: 27666:27676 ioctl c0306201 20000040 returned -22 01:47:04 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:04 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x6c000000]}) 01:47:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r1, 0x0, 0xd, &(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) wait4(r2, 0x0, 0x1000001, 0x0) 01:47:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000380)=0x697e, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x1, 0x3, 0x6}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0xff, 0x78, 0x0, 0x3, 0x1, 0x2, 0x8, 0x0, 0x9, 0x1ff, 0xed, 0x1, 0x800, 0x0, 0xe, 0x14}}) fsetxattr$security_evm(r2, &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=@v2={0x0, 0x1, 0xb, 0x0, 0xb0, "1f0abd21f84cdb8468a384794b7bbb3517531af896ac1d6478656642beeab626cf6951c121db1b3e130dd8d2fdc6c8e11b5159af231aefacab82ea832f60d4f35cd5c20062d38aa674ea9f67174579ad9bc4a7bb2855352f07c55d23da0f227d0c9f79fddfd81201b671d0f1a8ff7e97556885f7df340a558f34818c4b1638fbacf691b3f7b124ce0662264c70848ae17f9991e1c81a240d6a64fc9c7934168b528aa71285a2adbe8a11791d80dc9769"}, 0xba, 0x2) 01:47:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [0x0, 0x80ffff00000000]}) 01:47:04 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 594.387112] binder: 27680:27684 ioctl c018620c 0 returned -14 01:47:04 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x4c000000]}) 01:47:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 594.430569] binder: 27682:27688 unknown command 536871360 [ 594.462175] binder: 27680:27684 ioctl c018620c 0 returned -14 01:47:04 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x330f0000]}) [ 594.496034] binder: 27682:27688 ioctl c0306201 20000040 returned -22 01:47:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [0x0, 0x80ffff]}) 01:47:04 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x20003) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, 0x0) [ 594.538718] binder: 27682:27713 unknown command 536871360 [ 594.562544] binder: 27682:27713 ioctl c0306201 20000040 returned -22 01:47:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$KDENABIO(r1, 0x4b36) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb79, 0x1, 0x5c, 0xc3}, &(0x7f00000001c0)=0x98) fcntl$setsig(r0, 0xa, 0x2a) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 594.702853] binder: 27729:27732 ioctl c018620c 0 returned -14 01:47:05 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:05 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x3f00]}) 01:47:05 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 01:47:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [0x0, 0x0, 0x80ffff]}) 01:47:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x100) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000280)={0x6, 0x7, 0x3d4}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000500)=""/193, &(0x7f0000000040)=0xfffffffffffffd3a) fsync(r1) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000080)) ftruncate(r1, 0x1b) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x101080, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x8, 0x0) [ 595.316136] binder: 27742:27749 ioctl c018620c 0 returned -14 01:47:05 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x6800000000000000]}) 01:47:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) sendto$packet(r1, &(0x7f0000000100)="b0ea90a992e1d6e4401bb95fb437b1a7880308ee7ae4f50420183cdaff36c43c41a2ce69363ad11373649b28c8e64eb749a1ce44d860edd2f163ca7be23c43e87297c527f1503caab8dbb6c6665dae42e64e08a0fd96d0a4fa2ab32354991288cf88c9ed7c09d524cdf44881a18a019b1f8321e829802f3bf3b22fc0e8fe31f8acea99f1919de0eadc336932fe100b5f843f872b34428436b6675870916dc6970d1f25a3e7", 0xa5, 0x1, &(0x7f0000000400)={0x11, 0xf8, r3, 0x1, 0x9, 0x6, @random="0cb304ec5b12"}, 0x14) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x1}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000480)=0xb9) write$cgroup_int(r1, &(0x7f00000003c0)=0x9, 0x12) sched_setscheduler(r2, 0x5, &(0x7f00000000c0)=0x3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 01:47:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x1f) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 595.371641] binder: 27740:27750 unknown command 536871360 [ 595.393644] binder: 27740:27750 ioctl c0306201 20000040 returned -22 01:47:05 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x500000000000000]}) [ 595.433906] binder: 27740:27765 unknown command 536871360 01:47:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [0x0, 0x0, 0xffff8000]}) [ 595.474840] binder: 27740:27765 ioctl c0306201 20000040 returned -22 01:47:05 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 01:47:06 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:06 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="000000000010006c"]], 0x0, 0x0, 0x0}) 01:47:06 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x7400000000000000]}) 01:47:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000480)=0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee01]) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000005c0)=0x0) r6 = getuid() getresgid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) sendmsg$unix(r1, &(0x7f0000000700)={&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000002c0)="ac2386", 0x3}, {&(0x7f0000000300)="22137c80b02ef2e9b2905ed3d8efdcd6683ef3198df6831e343d15deda86405d6c7767943cebc68794ec7b3e9d6a44ade78862f4fd7c76b43c82a44e43271fbfa6211978ed4876a5d7e09c699bae1ccb5f10780d241fee", 0x57}, {&(0x7f0000000380)="9585ca7bb761f7e4cd01fb59150c3e9733663b26870048a1972b22dc54f2df96df220120229b9868448735898bb62738a34f886bce468cc8e24bcc15028b32703a2a1b2ae4306b19130b4f7713b6680f704dfe69151f5412ad731a3a33ca97086ef24458460200578ef6fbfb622d30fedc5c29af8bcacb42b68fee08c3b472b6be61e39f9978ff15c58556eb4ca8c41e08829a2b", 0x94}], 0x3, &(0x7f00000006c0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x40, 0x4080}, 0x40081) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000780)={0xfa40, {{0x2, 0x4e24, @broadcast}}}, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000740)=r8, 0x4) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x10040, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x294600) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3, 0x8001, 0x3, 0x3}, {0x3, 0x7, 0x17, 0x80000000}, {0x0, 0x84, 0x10001, 0x475a}]}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 01:47:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [0x0, 0x0, 0x80ffff00000000]}) 01:47:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={r2, 0x6, 0x7fff, 0xff}, &(0x7f0000000080)=0x10) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:06 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x40000000]}) [ 596.202174] binder: 27796:27804 ioctl c018620c 0 returned -14 [ 596.213050] binder: 27793:27794 unknown command 536871360 [ 596.239348] binder: 27793:27794 ioctl c0306201 20000040 returned -22 01:47:06 executing program 0: r0 = getpgrp(0xffffffffffffffff) ptrace$peekuser(0x3, r0, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r2 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x0, 0x202000) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000200)={0x2, 0x3ff}) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x28, &(0x7f0000000140)}, 0x10) r4 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x2, 0x0) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000000c0)=r5) 01:47:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [0x0, 0x0, 0x0, 0x80ffff00000000]}) [ 596.310031] binder: 27793:27812 unknown command 536871360 [ 596.332307] binder: 27793:27812 ioctl c0306201 20000040 returned -22 01:47:06 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="000000000010004c"]], 0x0, 0x0, 0x0}) [ 596.383050] binder: 27819:27822 ioctl c018620c 0 returned -14 [ 596.416224] binder: 27819:27822 ioctl c018620c 0 returned -14 01:47:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x101000) [ 596.505999] binder: 27829:27830 unknown command 536871360 [ 596.539881] binder: 27829:27830 ioctl c0306201 20000040 returned -22 [ 596.568953] binder: 27829:27836 unknown command 536871360 [ 596.584495] binder: 27829:27836 ioctl c0306201 20000040 returned -22 01:47:06 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 01:47:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [0x0, 0x0, 0x0, 0x80ffff]}) 01:47:06 executing program 1: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000200)=""/219) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) r2 = msgget$private(0x0, 0x40a) ioctl$int_out(r1, 0x5462, &(0x7f0000000080)) msgctl$IPC_RMID(r2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:06 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:06 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x7000000]}) [ 597.056647] binder: 27841:27842 ioctl c018620c 0 returned -14 [ 597.079871] binder: 27844:27846 unknown command 536871360 01:47:07 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x44000, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, 0x0) [ 597.109989] binder: 27844:27846 ioctl c0306201 20000040 returned -22 [ 597.137092] binder: 27844:27854 unknown command 536871360 01:47:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x4, 0xffffffffffffffab, 0x0, 0x7, 0x0, 0xb8}) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 597.182466] binder: 27844:27854 ioctl c0306201 20000040 returned -22 [ 597.211306] binder: 27856:27857 ioctl c018620c 0 returned -14 01:47:07 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [0x0, 0x0, 0x0, 0xffff8000]}) 01:47:07 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 01:47:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x6) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 597.384005] binder: 27870:27872 unknown command 536871360 [ 597.401787] binder: 27873:27874 ioctl c018620c 0 returned -14 [ 597.415878] device bridge_slave_1 left promiscuous mode [ 597.421453] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.428115] binder: 27870:27872 ioctl c0306201 20000040 returned -22 01:47:07 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 597.459056] binder: 27873:27874 ioctl c018620c 0 returned -14 [ 597.482223] IPVS: ftp: loaded support on port[0] = 21 [ 597.502296] device bridge_slave_0 left promiscuous mode 01:47:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [0x0, 0x0, 0x0, 0x0, 0xffff8000]}) 01:47:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) [ 597.509641] binder: 27870:27886 unknown command 536871360 [ 597.515629] bridge0: port 1(bridge_slave_0) entered disabled state 01:47:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000500)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x52, 0x200800) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000010}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x2dc, r2, 0x42a, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf9b9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @local, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @empty, 0x7f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x45d3}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3088}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff800000}]}, @TIPC_NLA_BEARER={0x1b4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @mcast1, 0x7ff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @local, 0x3f}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @local, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @remote, 0x80000001}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @mcast1, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8001, @local, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffffffffffffd, @mcast1, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @ipv4={[], [], @broadcast}, 0x7c2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x4}, 0xc854) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000480)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, {0x1, @remote}, 0x4, {0x2, 0x4e22, @multicast2}, 'eql\x00'}) [ 597.554511] binder: 27870:27886 ioctl c0306201 20000040 returned -22 [ 597.602622] binder: 27895:27896 ioctl c018620c 0 returned -14 [ 597.629089] binder: 27895:27897 ioctl c018620c 0 returned -14 [ 597.754107] team0 (unregistering): Port device team_slave_1 removed [ 597.772233] team0 (unregistering): Port device team_slave_0 removed [ 597.783239] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 597.819142] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 597.874154] bond0 (unregistering): Released all slaves [ 598.524628] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.531343] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.539888] device bridge_slave_0 entered promiscuous mode [ 598.583032] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.589543] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.597297] device bridge_slave_1 entered promiscuous mode [ 598.640421] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 598.683178] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 598.814294] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 598.859813] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 598.941315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 598.948827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 599.075314] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 599.083050] team0: Port device team_slave_0 added [ 599.109558] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 599.116636] team0: Port device team_slave_1 added [ 599.144840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 599.171749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 599.208733] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 599.216718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 599.227707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 599.265020] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 599.272408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 599.281669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 599.559793] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.566315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.572870] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.579259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.586772] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 599.965494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 600.482660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.567840] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 600.654832] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 600.661390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 600.668959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 600.759235] 8021q: adding VLAN 0 to HW filter on device team0 01:47:11 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x300]}) 01:47:11 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) ftruncate(0xffffffffffffffff, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 01:47:11 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000002300)=0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002340)={[], 0x54, 0x10000, 0x4, 0x1e4, 0x0, r2}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) socket$packet(0x11, 0x3, 0x300) write$9p(r1, &(0x7f0000000200)="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", 0x1000) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000022c0)={0x40, 0x60b, &(0x7f0000000040)="f6cef43ccbdfaba60f9d99514cddade764eb2bad48263c7d72061144bbf64fbde0082c8d43de4499595453345191841838ad6ae96e304b30b0aba7186cfd3bb8530a87d86dab7b", &(0x7f0000002200)="e5fe5c6a035a2e81fc6fd0f849f45b535e488350acf6d173352ced5f4d63380d89bb294c071c819c8948362ba41f889175e805786cd06732d86a24b8520447419643ad21bd3b60ef6fc3110b2724533f56fa3cb482a3734bbfe1c85e12eac7d95e6ec54401563ddadb1509edcad2de944bebb8133aaa555cb965ff5be1fd953a12a9e3e3f5e87322841b7c4b92a477ae295340dc8c", 0x47, 0x95}) setsockopt$inet_tcp_buf(r1, 0x6, 0x1b, &(0x7f0000001200)="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", 0x1000) 01:47:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 01:47:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 01:47:11 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) ftruncate(0xffffffffffffffff, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) [ 601.328642] binder: 28170:28173 ioctl c018620c 0 returned -14 [ 601.358523] binder: 28170:28179 ioctl c018620c 0 returned -14 01:47:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [0x0, 0x0, 0x0, 0x0, 0x80ffff]}) [ 601.384193] binder: 28172:28174 unknown command 536871360 [ 601.417250] binder: 28172:28174 ioctl c0306201 20000040 returned -22 01:47:11 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x6]}) 01:47:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x3, @remote, 0x9}}, 0x80000001, 0xb77, 0x1, 0x59, 0x400000000c3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000080)={0x3, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x5, 0x80, 0x4, 0x962, 0x10, 0x6}) 01:47:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000080)={0x6, 0x91d6}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) syncfs(r0) getsockopt$inet6_buf(r1, 0x29, 0x15, &(0x7f0000000200)=""/174, &(0x7f0000000140)=0xae) [ 601.460630] binder: 28172:28194 unknown command 536871360 01:47:11 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) ftruncate(0xffffffffffffffff, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) [ 601.517224] binder: 28172:28194 ioctl c0306201 20000040 returned -22 01:47:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 601.562061] binder: 28200:28208 ioctl 401070ca 20000080 returned -22 [ 601.590632] binder: 28200:28208 ioctl 40087602 20000000 returned -22 01:47:11 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) [ 601.628319] binder: 28200:28208 ioctl c018620c 0 returned -14 [ 601.654513] binder: 28200:28208 ioctl 401070ca 20000080 returned -22 01:47:11 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:11 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x7a00000000000000]}) [ 601.684770] binder: 28200:28221 ioctl 40087602 20000000 returned -22 [ 601.713151] binder: 28224:28225 unknown command 536871360 [ 601.720432] binder: 28200:28226 ioctl c018620c 0 returned -14 01:47:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x4800, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 601.752918] binder: 28224:28225 ioctl c0306201 20000040 returned -22 01:47:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) time(&(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/binder#\x00', 0x4) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000080)={0x0, 0x5}) 01:47:11 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x200000000000000]}) [ 601.807723] binder: 28224:28237 unknown command 536871360 [ 601.839861] binder: 28224:28237 ioctl c0306201 20000040 returned -22 01:47:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 01:47:11 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100004"]], 0x0, 0x0, 0x0}) 01:47:11 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000200)=@md5={0x1, "be4df731ad4dab40c14d9b452a29dd2a"}, 0x11, 0x3) socket$netlink(0x10, 0x3, 0xf) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000240)) [ 601.920107] binder: 28248:28251 ioctl c018620c 0 returned -14 01:47:11 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x700000000000000]}) [ 601.970013] binder: 28248:28262 ioctl c018620c 0 returned -14 01:47:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000080)={'ip6gretap0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000040)) [ 602.037831] binder: 28266:28268 unknown command 536871360 [ 602.056372] binder: 28266:28268 ioctl c0306201 20000040 returned -22 01:47:11 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x600000000000000]}) [ 602.089239] binder: 28266:28279 unknown command 536871360 01:47:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x8000000) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 602.140141] binder: 28266:28279 ioctl c0306201 20000040 returned -22 [ 602.149335] binder: 28283:28285 ioctl c018620c 0 returned -14 [ 602.186204] binder: 28283:28285 ioctl c018620c 0 returned -14 01:47:12 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 01:47:12 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="000000000010007a"]], 0x0, 0x0, 0x0}) 01:47:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000080)={0x70c0, 0x4000}) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0471f580e883debe205f3df8cc695702"], 0x1, 0x400000000003) 01:47:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000003c0)=0x3) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000200)={r2, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:12 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0xf33]}) [ 602.666712] binder: 28306:28307 ioctl c018620c 0 returned -14 [ 602.679825] binder: 28306:28307 ioctl 4010aeab 20000080 returned -22 [ 602.701889] binder: 28304:28311 unknown command 536871360 01:47:12 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x68]}) [ 602.711845] binder: 28306:28307 ioctl c018620c 0 returned -14 [ 602.720388] binder: 28304:28311 ioctl c0306201 20000040 returned -22 [ 602.739750] binder: 28306:28321 ioctl 4010aeab 20000080 returned -22 01:47:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000200)={0x3, [0x0, 0x8, 0x3]}, 0xa) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={r2, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x8000, 0x59, 0x88}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:12 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0xa00000000000000]}) 01:47:12 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x1, 0x0) accept4$llc(r0, 0x0, &(0x7f0000000040), 0x80000) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, 0x0) [ 602.764202] binder: 28304:28330 unknown command 536871360 [ 602.784128] binder: 28304:28330 ioctl c0306201 20000040 returned -22 01:47:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 01:47:12 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x2000000]}) [ 602.896577] binder: 28340:28344 ioctl c018620c 0 returned -14 01:47:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:13 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:13 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x6c000000]}) 01:47:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) mlockall(0x6) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 01:47:13 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) [ 603.567317] binder: 28371:28373 ioctl c018620c 0 returned -14 [ 603.585703] binder: 28371:28373 ioctl c018620c 0 returned -14 01:47:13 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x700]}) [ 603.607673] binder: 28372:28374 unknown command 536871360 [ 603.644916] binder: 28372:28374 ioctl c0306201 20000040 returned -22 01:47:13 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3838000000000000, 0x10800) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, 0x0) 01:47:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:13 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x330f000000000000]}) 01:47:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) [ 603.740532] binder: 28372:28401 unknown command 536871360 [ 603.763059] binder: 28372:28401 ioctl c0306201 20000040 returned -22 01:47:13 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000002c0)={0x0, 0x9, 0x0, 0x0, 0x98, 0x3, 0x401}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x1c) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@v1={0x2, "8710c09646c08e7fc4abb76cda40d551"}, 0x11, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:13 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x4c000000]}) [ 603.824864] binder: 28404:28415 ioctl c018620c 0 returned -14 [ 603.863504] binder: 28404:28419 ioctl c018620c 0 returned -14 01:47:13 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r1, r2, 0x4}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) fcntl$setown(r0, 0x8, r3) r4 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc018620c, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000301000128bd700003000000030000040800000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$sock_netdev_private(r5, 0x89fd, &(0x7f0000000500)="03a637a5947554d682f19108469f43ce718d6d115fbc4a6acc0581e13262a946eec6e2fa7b66567e002dcd24353c3e05ff8b746ef3514a3201414237266ecd1c282e4e91b9c7c9ef202d14cff1567995cf8d36385206a25ec61a161b6f58b06d94bd178e8a19ac9678b48516a76d3e4d1d6d8d4709936afde5bc3f81f44c46e8c7bdb35811eb3c451003755a665024f920ea85f6c7a1b6fd268f9b383591eb21dc7d01856517c44022b8dc45344a0e23276271df5f7f59796b8ed62ef3731a86cf59b37ea73a96b4ee50a21f46efb3ff2a7f19aa50a49234c7b9926bc52e07e04ed7602f5c65b35194ca4738ab6f6c9be2057c5fc3") ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000280)={0xffffffffffff7b4e, 0x8000, 0x2, 0x1, 0xa, [{0x7, 0x7, 0x100000001, 0x0, 0x0, 0x1}, {0x6, 0x2, 0x6, 0x0, 0x0, 0x286}, {0x5d, 0x736, 0xc5, 0x0, 0x0, 0x200}, {0xfffffffffffffff7, 0x100000000, 0x81, 0x0, 0x0, 0x2}, {0xff, 0x1, 0x80000001, 0x0, 0x0, 0x2000}, {0xfffffffffffffffe, 0x20, 0x9, 0x0, 0x0, 0x300}, {0x3f, 0x9, 0x3ff, 0x0, 0x0, 0x800}, {0x179a, 0xe0c7, 0x9, 0x0, 0x0, 0x2c00}, {0x3, 0x401, 0xd7f9}, {0xffffffffffffffff, 0x1000, 0xa2, 0x0, 0x0, 0x1100}]}) 01:47:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [], [0xffff8000]}) [ 603.960549] binder: 28422:28425 unknown command 536871360 [ 603.974417] binder: 28422:28425 ioctl c0306201 20000040 returned -22 [ 604.037846] binder: 28422:28442 unknown command 536871360 [ 604.055852] binder: 28422:28442 ioctl c0306201 20000040 returned -22 [ 604.065207] binder: 28433:28444 ioctl c018620c 0 returned -14 [ 604.079006] audit: type=1400 audit(1544665633.950:71): avc: denied { ioctl } for pid=28433 comm="syz-executor0" path="socket:[156123]" dev="sockfs" ino=156123 ioctlcmd=0x89fd scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 604.171605] binder: 28433:28436 ioctl c018620c 0 returned -14 01:47:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000002c0)=""/216) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x1c) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0xffffffffffffff98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000040)={'veth0_to_bond\x00', 0x6}) 01:47:14 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x1000000]}) 01:47:14 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [], [0x80ffff00000000]}) 01:47:14 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x401) creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 01:47:14 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}) [ 604.499732] binder: 28455:28462 ioctl ab0a 401 returned -22 [ 604.530563] binder: 28455:28462 ioctl c018620c 0 returned -14 [ 604.530642] binder: 28454:28470 unknown command 536871360 01:47:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 604.567683] binder: 28454:28470 ioctl c0306201 20000040 returned -22 [ 604.586265] binder: 28455:28462 ioctl ab0a 401 returned -22 [ 604.611848] binder: 28454:28479 unknown command 536871360 01:47:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [], [0x80ffff]}) [ 604.654508] binder: 28454:28479 ioctl c0306201 20000040 returned -22 01:47:14 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, {0x4, 0xd176, 0x9, 0x4, 0x25, 0x40}, 0x4}, 0xa) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, 0x0) 01:47:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/validatetrans\x00', 0x1, 0x0) 01:47:14 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100002"]], 0x0, 0x0, 0x0}) [ 604.794162] binder: 28489:28491 ioctl c018620c 0 returned -14 [ 604.807135] binder: 28489:28493 ioctl c018620c 0 returned -14 01:47:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [], [0x0, 0xffff8000]}) 01:47:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000000)={0x10f000, 0x1f001, 0x7, 0x0, 0x848b}) [ 604.890475] binder: 28496:28498 unknown command 536871360 01:47:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x50000, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast1, @dev}, &(0x7f0000000200)=0xc) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0xc2000, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r3, 0xa, &(0x7f0000000a00)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x3, r2, &(0x7f0000000280)="3c413d64d64e55c18deab8de549441a1ac980923d4ad19975df514804f60e0615500fa761e758b82a17749ac091001f273d7a01094aecee6de3224f136db6f5cecc62a1e6b8a88bacc3632553e6050706751a68ef4acc07d8cfe101d95033af7c68de55bdac419438083d58baeabd60b7e425ebe0f410cf134a5d0b481265946b70c5c7095629cbc8f778c55577e9a5b7386", 0x92, 0x1f, 0x0, 0x1, r1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x7, r1, &(0x7f0000000380)="97650f84628b100cd01c65cb35c51c90ffbb0507bb21a7ed73ac7b2056cf2a06bd2086feef09ca1f36eef31e96bccc9cf20dae6e74f674078a15068ecb5b5df126b92d9ae03b6551114c471c10c6767a411727fc1bb0d6a7e02db042720130216751033913054728b2e291f26dc0b0631ba14b8ecbf19ebe4c8996b802a73534f262e8be90f2ab01", 0x88, 0x8a, 0x0, 0x1, r1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, r0, &(0x7f0000000480)="991286666e79488d4c9457de2483fea37df9bf9caf1529abc6aa4149c69773ed6ef1822c3c1e7b8646e466679f7d8c9c658dd3e7954c6fefd94a3e18554252c4bdd3e5166413cbe694ab073766bfd19dc62d4e674e59ee6816fb1e13db2aa7d19ef6e6495a034cfbccbd00e21aa9cefa41f07fcef40baf683e00f432db4619d9ce22cfd909c9e94f2d482870a1c63835a05bdd5699f0d4dc2aebe88fb2f256f33ff0a14d2895dcd3382b9ee3645188374f2f32b25002d6c499821c", 0xbb, 0xacc, 0x0, 0x0, r1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x8c, r1, &(0x7f0000000580)="a264c822ca9906f2c7e6f91812c51bc451172dd4fafe2e4dc45af9", 0x1b, 0x4, 0x0, 0x3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, r2, &(0x7f0000000600)="352831b6a1f573b4514bb90b4a8e7e8531fa23fdaeab38", 0x17, 0x1, 0x0, 0x3, r2}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000680)="400b715e865e832207128192da723ea2a9caeae6a9ea2f5c0528554b37f2cc803e273c6161db57b186e16bb09b26f4935873cc36ba9f747993c9881f2477f203d1fa76c3b4f79edd87f15c452ab0464df79c6b29c820a4729053e74bbb646a9e3b2246ef6295086b94fde8161e66c45487249d5c4a0c6bc2851f1ad0114422dddd0edb84eebb7777a6255a492c3b0d366a839098d9d0ace09f95be2243ea3ecbf2b6a58d7c7ee646464a5e8bd1746b4b09ed", 0xb2, 0x8, 0x0, 0x2, r1}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x1, r1, &(0x7f0000000780)="5944187283b024964a278bd038cf67eb93575c73e23e640d69a87789f4a5c1a02cda960a483e73d86688e6d449a0f1bdea5200283ef48142b6f1", 0x3a, 0x1000, 0x0, 0x3, r1}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x5, r1, &(0x7f0000000800)="894247d0d27ed732e7dea4c9fec6682a981b2ddb9f747032acadb51ffb78735a8ff8dc5306b922fa3a38b948617b24ec45d54a4bae40ac6561d2c713fa66168bbbeb56344787226b8056cb15eaa385873a8909977e5d66b987626bb635182f3a9b8fe8031f3f8c4a4d7fd513b98e1755ce3f152f255727f6c61c75e78c18c04e2dc82a9af57c16dcaf57072dc5cbae18f9964d344f6af6882c439073b26ef488a58513bf1e8af1929602f6745a1227de6bdb", 0xb2, 0x100000001, 0x0, 0x0, r2}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x2, r2, &(0x7f0000000900), 0x0, 0x1, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x2, 0x200, r2, &(0x7f0000000980)="6a8a1845ff9d24333de25c12b9420650ea666e9f", 0x14, 0x4, 0x0, 0x2, r1}]) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 604.935686] binder: 28496:28498 ioctl c0306201 20000040 returned -22 [ 604.967234] binder: 28503:28505 ioctl c018620c 0 returned -14 [ 604.971898] binder: 28496:28506 unknown command 536871360 01:47:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 605.000492] binder: 28503:28505 ioctl c018620c 0 returned -14 [ 605.008463] binder: 28496:28506 ioctl c0306201 20000040 returned -22 [ 605.108861] binder: 28514:28515 ioctl c018620c 0 returned -14 01:47:15 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:15 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 01:47:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [], [0x0, 0x80ffff00000000]}) 01:47:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000200)=@sha1={0x1, "9640a6e59d2bffc66724bdece3562f4bb970fe29"}, 0x15, 0x1) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) mq_timedsend(r1, &(0x7f0000000280)="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", 0x1000, 0x2, &(0x7f0000001280)={0x77359400}) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000001300)='syz1\x00') ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000012c0)={0x4, 0x0, 0x4, {0xfffffffffffffffc, 0x4, 0x0, 0x5}}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x200000, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x2, 0x208400) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:15 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x6]}) [ 605.501178] binder: 28526:28527 ioctl c018620c 0 returned -14 [ 605.533887] binder: 28526:28527 ioctl c018620c 0 returned -14 01:47:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x830d, 0x400000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000080)=0x80, 0x4) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 605.549966] binder: 28520:28531 unknown command 536871360 01:47:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xfffffffffffffbd1) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 01:47:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [], [0x0, 0x80ffff]}) [ 605.608693] binder: 28520:28531 ioctl c0306201 20000040 returned -22 01:47:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x4000000000c8086, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000011c0)={r2, 0x9}, &(0x7f0000001200)=0x8) r3 = fcntl$getown(r0, 0x9) sendmmsg$alg(r1, &(0x7f0000001100)=[{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000840)="9ad43c645ef80391a2c553fb2d5b71eeacf357f013c4e484d60e333ca794a83fd148cb4ef9b16ba7e030eb9993fc817ba2fa1b4fb4068d01c2a39836d2692ee5620b048dd54d9e13f25fb254706aad12d33513d99a5136d007449f0f50967d6bbfb831dc9348e776708acdb214a7656ec3ceaa93adf4635a73fa", 0x7a}, {&(0x7f00000008c0)="5e0d41d832d9474c4f43ccb44f788ac3d144a867cf39b7244466f98c98c207951133034e33ecb232117785c842e0538bdd4b210739ea8e74e881bab326b50e4c9e454da03da22c2357f87dd3587ba0ef44a13a222eb95cb9040acf050df23f24279be71b2b47308eb81d7c353abc57bc8e8172fc22a5978d0e55206801405eada11c4797f06e19819a98d37e976af18aa1f5a538d6cb039f8785720fc292adc32de374194b0f6368bec26d51fbcb5d922b7ec780c2e513ede60bde65694964ecf57a5863649467b6321973c367aa73461e20ccd0ea983c9bc559ad45643f", 0xde}, {&(0x7f00000009c0)="17c83d4ad3146bb0f70f303192bb84a23eb70daedb7917ea89f45c6caeb4e77017ddc7c4e79bddcfa73a3a43791bbcce2b28aa7cea96d86f1be3d777626bc39d90405e6fdaa7ba4544cf58ac825d5a7590ce72a19dac60cddb651f6812a41f115da183afd023f9cd1d16775f05ddeb696f01e36af08921d16775d4edc6592be57b3aae2ca5fafb86a9dc116e14a0a2221f5e7cb24934600cc3ae69cad19c4c282e233325090d77294729586006", 0xad}], 0x3, &(0x7f0000000ac0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0xc8, 0x117, 0x2, 0xaf, "504d15cb1768caa5763c207dc0385af68c863efe41ea20642f855b6422f722e28e22327050ff5b1c34dca56914b7045b0835d0489aadc79ffc2c1c53ff7dca1fb90d719098bba10c4ef7359f56fb7399606da1a39cc4bb953ae7d94f34ce1d646d3a4f2de210ffd8fdd52a82916924470641b069ecb9d7e2149ca16ad069ded37a4b85ebb38e34af09bfe477830d428accd3d571af6375724875f8f0164c14f8bcd3f3d8e04f87a47d31f448444cef"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x38, 0x117, 0x2, 0x20, "6f2d427d185d279011416be33bf9aa4833bcb23dd9649d1bc44d778a2a6f8ee3"}, @assoc={0x18}], 0x160, 0x20000000}, {0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c40)="d6266e9168657c46d7918bf04a1e5d7a974a355d1db47ef5f8e3fa4f0d6e53ab01465f01ea4b1ef84fa72afd9c4f3f92b6053996830230412b4dc5464c35b0add9e65d166794bd3e78e15732df394bb0b3e34d2101b3c1eafa897cb944bab5d6ed90329e35b87dc7b4267e14351144ae6736d1916c10ee7eba1265be0547249a8418b510cbf8a3a59bbd86c9e9c1ff65cdf462d2e5eceabb3561f7d26dabf2372ac14f1e6c4acacebbdd94d08846c16aa6b7", 0xb2}, {&(0x7f0000000d00)="eba5843d25c87282d0fe81ec39edad4987b326f0ff467da6b34075328fedfe631d951b7d3ca0b99ea10397636147e556c81f4dbf9862d48a5d27b1672155c51d528aadf448759327b83b27baafec52e48f9e0f8432d8e3f631d01f42a5980f2f14c64a223db1f303ee3d6fd838cde42e41ae4c120f5b5955eb59bd1a022acaf1746def5fc47b18c4f57a250ef1b4653b7efeb6eb075e345becd8d3cd386210609cf5ca01264a22047c8673ded716732b0e2aea3124e2dcbf5175ae95b1d8519ad510a71f59472d6483260fc6", 0xcc}, {&(0x7f0000000e00)="08a9316c3ef36c5c4a8c8523dc6f39193f505307c893df69580bf370b6cd507e06c19154cfed6653daa27c3bd1d889ee1b99661ece38a8b38a96b85203615890c7c32045da389861d2ef71a21db1f582e83060025bbe1daaeae1036d57428ec6fc384818ade760e8bfe0516d831d3929f9f26a8a1e2877", 0x77}], 0x3, &(0x7f0000000ec0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x4040}, {0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000f40)="46d19fc924a800922c3d8d60090e8e6e2d9e0f2a3ac2eff8a8fb27ab5a0c74a3209dc5382753676335e67c2f4dd18d7a89c88f4f1feab3f1fb9c4905bd6136217b32aa059faff93bcacb75dce3cc5c8c17944061f61dbe14343327aa0423ce2c74f04b13fc77f4f5b2c39db8ce5f4f4957e37da415dd15ff66847938ea5cb9043ab891fb395e093985a1aefc8ecce820c6bea3a3bba75303ee5232c8ac8cde4ca6ab0d907969cb0477bea799601a444c4cdec5ce441f88d4f2c4a1b642db5740f79ea8f689f6bbd2c1c07a8bd6fcc0e1", 0xd0}, {&(0x7f0000001040)="ea47d162ba1474b3e7f37d79a5b9ce94b1177c2fd23ba573c4c12567b2f9007c104088cae86e22ef74617427f9740dd05e7c7ae5c4cc6fe54d80798e6c4ded85e03f5737ee91905a227c874b2f27cc4012c29d2336defec346f91aa5d677aafaecea8e74bd28533906dd411a", 0x6c}], 0x2}], 0x3, 0x4000) write$uinput_user_dev(r0, &(0x7f00000003c0)={'syz0\x00', {0x400, 0xff, 0x2, 0x40}, 0x3e, [0x101, 0x1, 0x877, 0x1000, 0x80, 0x9722, 0xffffffffffffff01, 0x2, 0x10001, 0x9, 0x7f, 0x6, 0x2, 0x1a1, 0x9, 0x3, 0x0, 0x7, 0x7fffffff, 0x9, 0x200, 0x5, 0x8000, 0x2, 0x5, 0x5, 0x466b, 0x80, 0xfee8, 0x5, 0xff45, 0x1, 0xc000000000000000, 0x9, 0x0, 0x9, 0x0, 0x3, 0x91b, 0x0, 0x306, 0x3ff, 0x5, 0x0, 0xac19, 0xffffffffffffffa7, 0x4, 0x5, 0x6, 0xfffffffffffffffa, 0x5, 0x81, 0x18, 0x4, 0x4, 0xffffffffeaaebf7a, 0x5, 0x5, 0x3, 0x200, 0x0, 0x7, 0x100000001, 0x400], [0x80, 0x7f, 0x5, 0xeb3, 0x4, 0x7, 0xc29, 0x6, 0x1, 0x10000, 0x4000000000000000, 0x3, 0x4, 0x9, 0x1f, 0x7, 0x100000001, 0x7, 0x8, 0x9, 0x5c, 0x0, 0x8000, 0xedef, 0x6, 0x4, 0x7f, 0x1000000010000000, 0x1c92, 0x5, 0xffffffff, 0x1ff, 0x712, 0x3f, 0x6d89, 0x6, 0x2, 0x40, 0x3, 0x800, 0x5, 0x4, 0x1000, 0x4, 0x4, 0x6, 0x8, 0x5, 0x9d, 0x5, 0x5, 0x1f, 0x0, 0x8, 0xfa, 0x5137, 0x6, 0xf05, 0xb36b, 0x100, 0x1178, 0x6, 0x554c, 0x26], [0x3, 0x6, 0x0, 0x0, 0xffffffffffff65cb, 0x81, 0x101, 0x7fff, 0x1, 0x920e, 0x0, 0x8e7, 0x1, 0xffff, 0xd8d, 0x8, 0x8000, 0x2aa, 0x1, 0x1ff, 0xffff, 0x81, 0x3ff, 0x3, 0x1, 0x1, 0xf67a, 0x5, 0x3, 0x9, 0xffff, 0x14000000000000, 0x2, 0xd82, 0x3, 0x1f, 0xfffffffffffffffe, 0x7, 0x200, 0x6, 0x1ff, 0x23c9, 0xffffffffffffffc0, 0x2f, 0x970, 0x401, 0x4, 0x4, 0x4, 0x81fc, 0x80000000, 0x101, 0x1000000, 0x8, 0x0, 0x100, 0x9, 0x3ff, 0x100000001, 0x27a, 0x1fc000, 0x101, 0x7, 0xbb93], [0x9c, 0x6, 0x4, 0xd3, 0x755a, 0x1, 0xceb, 0x7fff, 0x7, 0x1, 0x101, 0xffff, 0xb7e, 0x7ff, 0xffffffffffffffff, 0xd59, 0x80000001, 0x8, 0x80, 0x5, 0x70, 0x3, 0x76c2bb3a, 0x0, 0x4, 0x3, 0x55, 0x6, 0x6, 0x81, 0x9e37, 0x401, 0x4, 0x1f, 0x1, 0x7, 0x8, 0x4, 0x3, 0x5ad, 0x5, 0x7, 0x7, 0x7fff, 0x4, 0x6, 0x5, 0x7, 0x1, 0xffffffffffffff01, 0x9, 0x9, 0x3f, 0xffff, 0x3, 0x7, 0x9, 0xf73b, 0x6, 0xd4b1, 0xfffffffffffffffa, 0x0, 0x100000000, 0x6]}, 0x45c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) getresgid(&(0x7f0000000080), &(0x7f0000000300), &(0x7f0000000340)=0x0) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001240)={r3, r4, r5}, 0xc) [ 605.676111] binder: 28520:28540 unknown command 536871360 [ 605.697897] IPVS: ftp: loaded support on port[0] = 21 [ 605.705601] binder: 28520:28540 ioctl c0306201 20000040 returned -22 [ 605.739988] binder: 28542:28544 ioctl 40046205 fffffffffffffbd1 returned -22 [ 605.765713] device bridge_slave_1 left promiscuous mode [ 605.771555] binder: 28542:28544 ioctl c018620c 0 returned -14 [ 605.778808] bridge0: port 2(bridge_slave_1) entered disabled state 01:47:15 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 605.788012] binder: 28542:28544 ioctl 40046205 fffffffffffffbd1 returned -22 [ 605.800488] binder: 28542:28548 ioctl c018620c 0 returned -14 [ 605.827023] device bridge_slave_0 left promiscuous mode [ 605.833799] bridge0: port 1(bridge_slave_0) entered disabled state 01:47:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) r1 = gettid() ptrace$peek(0x1, r1, &(0x7f0000000000)) [ 605.897324] binder: 28556:28558 ioctl c018620c 0 returned -14 [ 605.899326] binder: 28553:28554 unknown command 536871360 [ 605.913089] binder: 28556:28558 ioctl c018620c 0 returned -14 [ 605.938586] binder: 28553:28554 ioctl c0306201 20000040 returned -22 [ 605.980008] binder: 28553:28561 unknown command 536871360 [ 605.988281] binder: 28553:28561 ioctl c0306201 20000040 returned -22 [ 606.005057] team0 (unregistering): Port device team_slave_1 removed [ 606.021819] team0 (unregistering): Port device team_slave_0 removed [ 606.036732] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 606.079971] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 606.153979] bond0 (unregistering): Released all slaves 01:47:16 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000080)={{0x77359400}, {r1, r2/1000+30000}}, &(0x7f0000000200)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x802, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [], [0x0, 0x0, 0xffff8000]}) 01:47:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x8000) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000040)=0x7ff) 01:47:16 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 606.402604] binder: 28577:28583 ioctl c018620c 0 returned -14 [ 606.421764] binder: 28577:28583 ioctl c018620c 0 returned -14 [ 606.428459] binder: 28581:28584 unknown command 536871360 [ 606.434222] binder: 28581:28584 ioctl c0306201 20000040 returned -22 [ 606.519334] binder: 28581:28593 unknown command 536871360 [ 606.538029] binder: 28581:28593 ioctl c0306201 20000040 returned -22 [ 607.092621] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.099528] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.107361] device bridge_slave_0 entered promiscuous mode [ 607.153400] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.160083] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.168848] device bridge_slave_1 entered promiscuous mode [ 607.214532] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 607.267127] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 607.438217] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 607.482624] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 607.640726] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 607.648212] team0: Port device team_slave_0 added [ 607.688031] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 607.695337] team0: Port device team_slave_1 added [ 607.734129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 607.761083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 607.787996] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 607.795027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 607.803543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 607.842350] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 607.849687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 607.860738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 608.123680] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.130287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.136931] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.143263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.150719] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 608.265512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 609.050649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.137427] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 609.223681] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 609.229852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 609.237465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 609.322536] 8021q: adding VLAN 0 to HW filter on device team0 01:47:19 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 01:47:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x414000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xe8, 0x14, 0x8, 0x200, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x8}, [@typed={0xc, 0x3b, @u64=0x4}, @generic="fc4200992bdb47b49f4650db38ac1738ce884e9799c6b48dc8a33a2a6eac17e6ad928045bb5d60d8f12ed017431c0bc780ddff4f84cac1f73071090e43a5026dac0e774ef9bf", @generic="b5773a12d9e0a43c8723247481cfd85ae94ab67437ac8f46be40c0c7ff87200ecfe26bb953c74b0202f8387aaf053bd384dc36a7ae94f16bf8", @generic="c966afa8c1d925f6df49e39a4419c8436037bfc221", @generic="0bc7832c3147d5afb39d9ec46481810a25b07479f8fa3304cd67f3", @generic="90c9cc6ff65577c8f40a560ec633572edb85087c2e3d64"]}, 0xe8}, 0x1, 0x0, 0x0, 0x40880}, 0x11) 01:47:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000000)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x14, 0x4) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000040)={'yam0\x00', 0x5}) 01:47:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [], [0x0, 0x0, 0x80ffff00000000]}) 01:47:19 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:19 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xfff, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r1, 0xa, 0x1}, 0x14) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) r5 = getuid() stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000780)=0xe8) getgroups(0x3, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff]) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000800)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000900)=0xe8) fstat(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = geteuid() r16 = getegid() fstat(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0, 0x0}, &(0x7f0000000a80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000ac0)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000bc0)=0xe8) r20 = getegid() write$FUSE_DIRENTPLUS(r2, &(0x7f0000000c00)={0x5c0, 0x0, 0x4, [{{0x5, 0x1, 0x7f, 0x7, 0x60, 0x2, {0x5, 0x8000, 0x7, 0x77d9f478, 0x6, 0x77d2, 0x1, 0xfffffffffffffffe, 0x0, 0x1, 0x1f, r3, r4, 0x7f, 0x7}}, {0x0, 0x6, 0x1, 0xffff, '!'}}, {{0x3, 0x2, 0x400, 0x0, 0x5, 0x7, {0x5, 0x2, 0xd30d, 0x0, 0xbd, 0x9, 0x8000, 0xfffffffffffffffa, 0xffffffff, 0x4, 0x800, r5, r6, 0x959d, 0x5}}, {0x3, 0x2, 0x8, 0x1, '&]ppp1-.'}}, {{0x0, 0x2, 0x9, 0x0, 0x9980, 0x1, {0x2, 0x1, 0x8, 0x101, 0x2d, 0x8, 0x9, 0x2, 0x8, 0x0, 0xd99d, r7, r8, 0x0, 0x2a}}, {0x2, 0x7ff, 0xc, 0x0, '/dev/amidi#\x00'}}, {{0x2, 0x0, 0x7, 0x1, 0xfffffffffffffffe, 0x8, {0x1, 0x1f, 0x8, 0x428, 0x5, 0x3ff, 0xffffffffffffff00, 0x1ff, 0x3f, 0x6b, 0x7, r9, r10, 0x1, 0x3}}, {0x6, 0x400, 0x0, 0x8001}}, {{0x0, 0x7fffffff, 0x180000, 0x800, 0xffffffffffffffff, 0x2, {0x4, 0x40, 0x0, 0x20, 0x401, 0x0, 0x2, 0xfffffffffffffffb, 0x8000, 0x3ff, 0x5, r11, r12, 0x100000001}}, {0x4, 0xe9c1, 0x0, 0x4}}, {{0x5, 0x1, 0xb187, 0x2, 0x1000, 0x4, {0x3, 0x2, 0x4, 0x5, 0x6, 0x8000, 0x1b7a, 0x1, 0x1, 0x1000, 0x5, r13, r14, 0x8666, 0xfffffffffffffc00}}, {0x0, 0x4, 0x6, 0x6, '$ppp0!'}}, {{0x1, 0x0, 0x0, 0x10000, 0x11, 0x400, {0x5, 0xa6a9, 0x1ff, 0x7, 0x0, 0x8, 0x10000, 0x10001, 0x8000, 0x7, 0x2, r15, r16, 0x2, 0x3}}, {0x1, 0x10000, 0xf, 0x2, '}wlan0@useruser'}}, {{0x5, 0x2, 0x3, 0x7fffffff, 0x7, 0x0, {0x1, 0x1, 0x800, 0x2, 0xfffffffffffffbff, 0x1, 0x0, 0x7f, 0x5, 0x8, 0x100, r17, r18, 0x7}}, {0x4, 0xfb8c, 0xc, 0x6, '/dev/amidi#\x00'}}, {{0x2, 0x2, 0x3, 0x5, 0x3, 0x9, {0x4, 0x80000000, 0x7fffffff, 0x6, 0xb5, 0x3, 0x9, 0x3, 0x1f, 0x3ff, 0x7fff, r19, r20, 0xfff, 0xdec}}, {0x4, 0x9, 0xc, 0xffffffff, '/dev/amidi#\x00'}}]}, 0x5c0) [ 609.900572] binder: 28853:28855 ioctl c018620c 0 returned -14 [ 609.907552] binder: 28852:28854 unknown command 536871360 [ 609.913227] binder: 28852:28854 ioctl c0306201 20000040 returned -22 [ 609.936377] binder: 28853:28855 ioctl c018620c 0 returned -14 [ 609.962849] binder: 28852:28870 unknown command 536871360 01:47:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20, [], [0x0, 0x0, 0x80ffff]}) 01:47:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ustat(0xfffffffffffffff7, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 01:47:19 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) [ 610.020237] binder: 28852:28870 ioctl c0306201 20000040 returned -22 01:47:20 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x4, 0x30}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={r2, 0x6}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:20 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x4c]}) [ 610.141014] binder: 28889:28890 ioctl c018620c 0 returned -14 01:47:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x3) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20}) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/5, 0x5}, {&(0x7f00000000c0)=""/194, 0xc2}, {&(0x7f00000001c0)=""/164, 0xa4}, {&(0x7f00000002c0)=""/10, 0xa}], 0x4, 0x0) clock_settime(0x7, &(0x7f0000000000)={0x0, 0x989680}) [ 610.200775] binder: 28889:28897 ioctl c018620c 0 returned -14 [ 610.213831] binder: 28893:28894 unknown command 536871360 [ 610.229153] binder: 28893:28894 ioctl c0306201 20000040 returned -22 01:47:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) accept4$packet(r1, &(0x7f0000001d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001d80)=0x14, 0x80000) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000001dc0)={r2, 0x1, 0xfffffffffffffc8e, @dev={[], 0x19}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x701002, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)={r2}) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 610.265374] binder: 28893:28903 unknown command 536871360 [ 610.299062] binder: 28893:28903 ioctl c0306201 20000040 returned -22 01:47:20 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x300]}) [ 610.323080] binder: 28913:28914 ioctl c018620c 0 returned -14 [ 610.344785] binder: 28913:28916 ioctl c018620c 0 returned -14 01:47:20 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:20 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:20 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0xff) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000980)) r1 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000008c0)={0x7, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}]}) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x802) io_setup(0x0, &(0x7f00000002c0)=0x0) io_getevents(r3, 0x9, 0xa, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)={0x77359400}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/hwrng\x00', 0x3f, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x1c) write$selinux_create(r4, &(0x7f0000000900)=@objname={'system_u:object_r:usbmon_device_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x9, 0x20, './file0\x00'}, 0x59) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r4, 0x0, 0xd, &(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)=r5, 0x4) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000280)=0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 01:47:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x200, 0x100) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000180)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000040)='eth1\x00'}, 0x30) migrate_pages(r3, 0x2, &(0x7f00000000c0)=0x3, &(0x7f0000000100)=0x5) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:20 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0xa00]}) 01:47:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 01:47:20 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) [ 610.716670] QAT: Invalid ioctl [ 610.731365] binder: 28943:28948 ioctl c018620c 0 returned -14 01:47:20 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x7a00]}) [ 610.759076] QAT: Invalid ioctl [ 610.765972] binder: 28934:28949 unknown command 536871360 [ 610.782141] binder: 28934:28949 ioctl c0306201 20000040 returned -22 01:47:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x440, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x100000, 0x4) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) init_module(&(0x7f0000000080)='/dev/binder#\x00', 0xd, &(0x7f0000000200)='cpusetcgroup-\x00') openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video2\x00', 0x2, 0x0) 01:47:20 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x6]}) [ 610.821318] binder: 28934:28964 unknown command 536871360 01:47:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x8, 0xa0000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x100000000, 0x1b1, 0x3ff, 0x1, 0x9}, &(0x7f00000000c0)=0x14) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000240)=0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000003c0)={r4, 0x90, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x9, @mcast1, 0x24}, @in6={0xa, 0x4e22, 0x10000, @dev={0xfe, 0x80, [], 0x1b}, 0x1}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, @in6={0xa, 0x4e21, 0x2b7, @mcast1, 0x80000000}, @in6={0xa, 0x4e22, 0xdce, @mcast1, 0xffffffffffffffe0}]}, &(0x7f0000000400)=0x10) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000440)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000100)={r4, @in={{0x2, 0x4e24, @remote}}, [0x1, 0x20, 0x7, 0x40, 0x5, 0x8000, 0x4, 0x9, 0x8, 0x8, 0x4ea, 0xff, 0x6, 0x5, 0x4]}, &(0x7f0000000200)=0x100) 01:47:20 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 610.866522] binder: 28934:28964 ioctl c0306201 20000040 returned -22 [ 611.004542] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:47:21 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:21 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:21 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x7400]}) 01:47:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7ff, 0x18480) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x20, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x40) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 611.609438] binder: 28994:29001 unknown command 536871360 [ 611.615094] binder: 28994:29001 ioctl c0306201 20000040 returned -22 01:47:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x4000, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x7, 0x4000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x38, 0x40) fdatasync(r0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x200000, 0x0) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x180}, 0xc) 01:47:21 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x4000]}) [ 611.649639] binder: 28994:29013 unknown command 536871360 [ 611.655223] binder: 28994:29013 ioctl c0306201 20000040 returned -22 01:47:21 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080), 0x4) 01:47:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0x4, 0xbc1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 611.852980] binder: 29026:29033 unknown command 536871360 [ 611.862376] binder: 29026:29033 ioctl c0306201 20000040 returned -22 01:47:21 executing program 0 (fault-call:10 fault-nth:0): clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 611.903991] binder: 29026:29041 unknown command 536871360 [ 611.910414] binder: 29026:29041 ioctl c0306201 20000040 returned -22 01:47:22 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:22 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x2000000]}) 01:47:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000600)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000500)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000540)) sendmsg$rds(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000000200)=""/150, 0x96}, {&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000380)=""/192, 0xc0}], 0x4, 0x0, 0x0, 0x1}, 0x845) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) openat$cgroup_ro(r1, &(0x7f00000004c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) 01:47:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000040)={0x1, 0x0, @ioapic={0x1002, 0x0, 0xc312, 0xd7f, 0x0, [{0x6, 0x1, 0x26, [], 0x6}, {0x7ff, 0x15, 0x3, [], 0x77f7}, {0x1800000000000, 0x800, 0x4, [], 0x4}, {0x1, 0x7, 0x401, [], 0x100}, {0x8, 0x4, 0x80, [], 0x1}, {0x4, 0x5, 0x4, [], 0x7}, {0x9, 0x7f, 0x30, [], 0x2}, {0x7ff, 0x7, 0x7fffffff, [], 0xfffffffffffffff9}, {0xffffffffffff7fff, 0x0, 0x3, [], 0x81}, {0x6, 0x7e8d, 0x10000, [], 0x3}, {0xac, 0x1, 0x400, [], 0x5}, {0x1f, 0x4, 0x2, [], 0x7}, {0x2, 0x1, 0xffffffff, [], 0x3}, {0x4, 0x2, 0x639, [], 0x5}, {0xffffffffffffff89, 0xfdbb, 0x4, [], 0x5}, {0x1ff, 0x1, 0x2, [], 0x1}, {0x0, 0x5, 0x5, [], 0x400}, {0x2, 0x0, 0x9, [], 0x1}, {0x4, 0xfffffffffffffff7, 0xffffffff7fffffff, [], 0x3}, {0x4, 0x3, 0x5, [], 0x401}, {0x81, 0x400, 0x1, [], 0x6}, {0x7, 0x81, 0x1, [], 0xae02}, {0x1, 0x100, 0x8, [], 0x813}, {0x7, 0x4e95, 0x7fffffff, [], 0x1000}]}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) socket$unix(0x1, 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000180)={0x0, 0x401, 0x5, [], &(0x7f0000000140)=0x400}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000001c0)={0x1000, 0xb, 0x4, 0x5500140, {0x0, 0x7530}, {0x5, 0xa, 0x4, 0xaa, 0x6, 0x1, "d61a2af1"}, 0x73f800, 0x0, @fd=r1, 0x4}) 01:47:22 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100006"]], 0x0, 0x0, 0x0}) 01:47:22 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:22 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x7a000000]}) [ 612.486365] binder: 29054:29068 unknown command 536871360 [ 612.501321] binder: 29054:29068 ioctl c0306201 20000040 returned -22 01:47:22 executing program 1: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x80000001) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x1c) readahead(r1, 0x4, 0x80) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 01:47:22 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000038c0)='/dev/snapshot\x00', 0x40, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000003900)={[{0x9ba, 0xffffffff, 0x100000001, 0x6, 0x200, 0xffffffffffffff39, 0x3, 0xfff, 0x7, 0x401, 0x80000001, 0xfffffffffffffffd, 0x6}, {0x7, 0xe63, 0x1000, 0x2, 0x40, 0x3, 0x5, 0x80, 0x10000, 0x8, 0x9, 0x40, 0x1ff}, {0x9, 0x0, 0x8, 0x3, 0x3, 0xfffffffffffffff7, 0x7ff, 0x401, 0x4, 0x7ff, 0x7, 0x80000000, 0x8}]}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f0000003680)=[{{&(0x7f0000000140)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/247, 0xf7}], 0x1, &(0x7f0000000300)=""/29, 0x1d}, 0xfffffffffffffff8}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/39, 0x27}], 0x1, &(0x7f00000003c0)=""/249, 0xf9}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000004c0)=""/114, 0x72}, {&(0x7f0000000540)=""/123, 0x7b}, {&(0x7f00000005c0)=""/144, 0x90}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x4, &(0x7f00000016c0)=""/219, 0xdb}, 0x6}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/5, 0x5}, {&(0x7f0000002800)=""/205, 0xcd}, {&(0x7f0000002900)=""/6, 0x6}, {&(0x7f0000002940)=""/151, 0x97}, {&(0x7f0000002a00)=""/45, 0x2d}, {&(0x7f0000002a40)=""/174, 0xae}, {&(0x7f0000002b00)=""/88, 0x58}, {&(0x7f0000002b80)=""/206, 0xce}, {&(0x7f0000002c80)=""/89, 0x59}], 0xa, &(0x7f0000002dc0)=""/125, 0x7d}, 0x8001}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002e40)=""/62, 0x3e}, {&(0x7f0000002e80)=""/183, 0xb7}, {&(0x7f0000002f40)=""/105, 0x69}, {&(0x7f0000002fc0)=""/9, 0x9}, {&(0x7f0000003000)=""/45, 0x2d}], 0x5, &(0x7f00000030c0)=""/46, 0x2e}, 0x4733}, {{&(0x7f0000003100)=@ax25, 0x80, &(0x7f0000003240)=[{&(0x7f0000003180)=""/156, 0x9c}], 0x1, &(0x7f0000003280)=""/19, 0x13}, 0x3}, {{&(0x7f00000032c0), 0x80, &(0x7f0000003400)=[{&(0x7f0000003340)=""/178, 0xb2}], 0x1}, 0x3ff}, {{&(0x7f0000003440)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003580)=[{&(0x7f00000034c0)=""/131, 0x83}], 0x1, &(0x7f00000035c0)=""/159, 0x9f}, 0x200}], 0x8, 0x40000003, &(0x7f0000003880)={0x0, 0x989680}) ptrace$cont(0x1f, r0, 0x0, 0x0) tkill(r0, 0x20) [ 612.534276] binder: 29054:29073 unknown command 536871360 [ 612.556151] binder: 29054:29073 ioctl c0306201 20000040 returned -22 01:47:22 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:22 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x4000000]}) [ 612.729543] binder: 29092:29094 unknown command 536871360 [ 612.772684] binder: 29092:29094 ioctl c0306201 20000040 returned -22 [ 612.829064] binder: 29092:29109 unknown command 536871360 [ 612.838505] binder: 29092:29109 ioctl c0306201 20000040 returned -22 01:47:23 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) unshare(0x42030100) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f0000000040)=0x98) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @remote}}, 0x0, 0x9, 0x0, "8815b9e170453a02f3f804a74ce64a9892ec34bf3e8125997393163e9ea6b658a4666a3071e83ab25b81455159439382be3f2c9fb25e8d8efc89083dc7697b39a227fb6a5cc8d2e9a2d669d3dd3d13ad"}, 0xd8) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:23 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x19) io_setup(0x200, &(0x7f00000002c0)) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x5, 0x9, 0x6, 0x10001, 0x1, 0x2, 0x4, 0x7, 0x9, 0x81}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:23 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x2]}) 01:47:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x201) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:23 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:23 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x3000000]}) 01:47:23 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, &(0x7f00000001c0)=0x1c) fchmod(r1, 0x10) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7fffffff, 0x4000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000200)={@dev, @local, 0x0}, &(0x7f0000000240)=0xc) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, r3, 0x1}, 0xc) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000080)=""/63, 0x0, 0x800, 0x314}, 0x18) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 613.372580] binder: 29115:29130 unknown command 536871360 [ 613.399611] binder: 29115:29130 ioctl c0306201 20000040 returned -22 01:47:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8001, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:23 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x5]}) [ 613.454722] binder: 29115:29137 unknown command 536871360 [ 613.474796] binder: 29115:29137 ioctl c0306201 20000040 returned -22 01:47:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x2, 0x80003, 0xffffffffffffbed3) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f00000000c0)=0xfff, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:23 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 613.638426] binder: 29164:29166 unknown command 536871360 [ 613.669980] binder: 29164:29166 ioctl c0306201 20000040 returned -22 [ 613.692509] binder: 29164:29171 unknown command 536871360 [ 613.706711] binder: 29164:29171 ioctl c0306201 20000040 returned -22 01:47:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x7fffffff, 0xb77, 0x1, 0x9c, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0xc0, 0x0, &(0x7f0000000200)="8b8048e84d3847f43101f88396558431f7aec37308a2f75959f2e215f97aa4ed66392235a02dff071d42b3f36a9f0491ef893143b1e90da9d10e57102cb6559a0b57341b1bbd6e417e7c62ec767c52c30a14d77d0b740818ba1ccf39754e0ba0c8121b45f7768b364eb2b3f49f6073e49cb97de81b6c308403b5ba3314a76c8c1bdc26f21a7d7eca4b72522b40406593fe1151efa6e1cf78f38f232ea62a6e744274badfd5a1b081533def38d63a34ad19ef599d19af15a454d979b823d38195"}) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) setsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f00000002c0)="87d4b6ba81d74c06e8ccf67061b879a2ff44c0e98f9b7194b91810b1a8cd2652c4f6b75026df80349e6b10290fab98f03f0cdb451a731c08264826575f956a4f0a1e631375", 0x45) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000040)={0x2, 0x2000000, 0x5, 0x1f, 0x8, 0x2}) 01:47:24 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 01:47:24 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4000000013) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x3bfb, &(0x7f0000000040)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x80, 0x0) bind$llc(r1, &(0x7f00000002c0)={0x1a, 0x337, 0x9, 0x9, 0x7f, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '/dev/admmidi#\x00'}, {0x20, '/dev/admmidi#\x00'}, {0x20, 'cpuset&'}, {}], 0xa, "8b7c8c395451e0b06e890aa7eb8d8d32d9e9f4a8dae943eaf52e2a20f197e30c24b9e80ec23186d48aa72980db15ee3264632e851ee33d69f4215e9dc7da75f02852f8d23a93670d178f65e56a7b2a0060905930af919137ee59ae87d60446391554d2b0deff695817b6f9cc1f356aab10feb27c0bc0b84f745b66210b1911c3d70e4b"}, 0xb5) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x101, 0x200) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x2010, r3, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, {0x2, 0x2, 0x6, 0x3}}) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:24 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:24 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:24 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) [ 614.289236] binder: 29176:29178 ioctl 401845ff 20000040 returned -22 [ 614.339126] binder: 29180:29182 unknown command 536871360 [ 614.344787] binder: 29180:29182 ioctl c0306201 20000040 returned -22 [ 614.369186] binder: 29176:29201 ioctl 401845ff 20000040 returned -22 [ 614.381395] binder: 29180:29202 unknown command 536871360 [ 614.387804] binder: 29180:29202 ioctl c0306201 20000040 returned -22 01:47:24 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}) 01:47:24 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046208, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) mmap$binder(&(0x7f00006f5000/0xc000)=nil, 0xc000, 0x2, 0x20010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000001580)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000001600)={r1}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000001400)={r2}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getpeername$inet6(r0, &(0x7f00000013c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000015c0)=0x1c) r4 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) mmap(&(0x7f00005a1000/0x200000)=nil, 0x200000, 0x1fffffe, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x1, 0x1, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=""/191, &(0x7f00000012c0)=""/200, 0x101004}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001440)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000001540)=0xe8) r7 = getuid() setreuid(r6, r7) 01:47:24 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:24 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x600]}) [ 614.531652] binder: 29218:29222 unknown command 536871360 [ 614.542464] binder: 29218:29222 ioctl c0306201 20000040 returned -22 [ 614.567948] binder: 29218:29228 unknown command 536871360 [ 614.573601] binder: 29218:29228 ioctl c0306201 20000040 returned -22 01:47:24 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x3, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000140)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000380)={@multicast2, @loopback, 0x0}, &(0x7f00000003c0)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000440)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000500)={@mcast1, 0x0}, &(0x7f0000000540)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000005c0)=0x14, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000700)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x198, r4, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x84, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x4}}, {{0x8, 0x1, r9}, {0xe4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}, {0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x82}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x4010) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000040)) [ 614.755194] binder: 29242:29243 unknown command 536871360 [ 614.766094] binder: 29242:29243 ioctl c0306201 20000040 returned -22 [ 614.786349] binder: 29242:29247 unknown command 536871360 [ 614.797413] binder: 29242:29247 ioctl c0306201 20000040 returned -22 01:47:27 executing program 0: clone(0x800000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:27 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0xf33]}) 01:47:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080)=0x3, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x100000000}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000280)={r3, 0x31, "ef412ac985af6b8a74fc2964ef8121ae6837f7133b13ee8bbe74869137fc6bc8ede2426048af0bc1935f027fc05cc97ccc"}, &(0x7f00000002c0)=0x39) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:27 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100005"]], 0x0, 0x0, 0x0}) 01:47:27 executing program 4: openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x101, 0x10000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:27 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:27 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x3f000000]}) [ 617.430086] binder: 29254:29258 unknown command 536871360 [ 617.436127] binder: 29254:29258 ioctl c0306201 20000040 returned -22 [ 617.453529] binder: 29254:29273 unknown command 536871360 [ 617.460007] binder: 29254:29273 ioctl c0306201 20000040 returned -22 01:47:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7, 0x2000) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x300000000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x13, 0x1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYRES16, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], @ANYRES32=r3, @ANYRESHEX=r4], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000003c0)={0xfffffffffffffe01, 0x8, 0x8004, 0xe4, 0x6, 0x8, 0x2, 0x3ff, 0x0}, &(0x7f0000000400)=0x20) write$P9_RUNLINKAT(r2, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000440)={r5, 0xfff, 0x20}, 0xc) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[{}, {}, {}, {}]}) write$selinux_user(r2, &(0x7f0000000540)={'system_u:object_r:agp_device_t:s0', 0x20, 'system_u\x00'}, 0x2b) r6 = getpid() perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0xfffffffffffffff8, 0x1, 0x4, 0x8, 0x0, 0x2, 0x8804, 0x6, 0x7, 0x54a, 0x7, 0xffffffffffffffc1, 0x81, 0x3, 0x6, 0x9, 0x20, 0xff, 0x3, 0x2, 0x20, 0x6, 0x2, 0x401, 0x1, 0x1ff, 0xaf16, 0xfffffffeffffffff, 0x4, 0x79, 0x0, 0x40000, 0x1, 0x4, 0x3f, 0x9, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000480)}, 0x1000, 0x1, 0x6, 0x7, 0x10001, 0xb6, 0x1000}, r6, 0x1, r4, 0xa) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000280)={0x0, 0xfffffffffffffffd}) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000300)={'HL\x00'}, &(0x7f0000000380)=0x1e) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000140)={0x1, 0x1}) socket$inet(0x2, 0x800, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x0) 01:47:27 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2d) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:27 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) fallocate(r0, 0x4, 0x7, 0x8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r2, 0xfffffffffffffffd, 0x0, 0x3, 0x100000001}) 01:47:27 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001600)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) r2 = getuid() getresuid(&(0x7f0000001740)=0x0, &(0x7f0000001780), &(0x7f00000017c0)) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0xc4, 0x9, &(0x7f0000001500)=[{&(0x7f0000000140)="1ac4a565b7bbaab435248f09f207cc9677a473be5ee6", 0x16, 0x1}, {&(0x7f0000000180)="2cde41a86fd6166e75d34fbc86ab624d5da8b7cd4098687cb5631091f27d4c8c26acd536469fa5d9a3820f9d257e3a37b631e786456dbc47aaae36d4b95cae4e06a37c9dd5", 0x45, 0x5}, {&(0x7f0000000200)="3bfb9e194a92f97b97b1c5499a52f633437a456d108b6cd008c15d70586f709998ff5557", 0x24, 0x6}, {&(0x7f0000000240)="43d1914a863616717d85cd1221ddaee1fe6d89872ae5849db24a4b425c734c242d1beb5b76e0f922c7e706d88b8c1b651151cbd5aed2a8faa3724046f7e41c70eaf0c2baf7b20b01b85e71364c7a637579295433a675ccd30e", 0x59, 0x20}, {&(0x7f0000000300)="70d05c14083f7ec907c9a072e9e42ec6f38b2cc1413dd7f4b53ffe43c82437d9073a85c6eb686e07f200", 0x2a, 0x8}, {&(0x7f0000000340)="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", 0x1000, 0x20}, {&(0x7f0000001340)="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", 0xfd, 0x8}, {&(0x7f0000001440)="946c4610b7f35a", 0x7, 0xb5b2}, {&(0x7f0000001480)="f0dd938e4eb207799bcfad6035d8cc7c74de012069e5ec2dd136571e0a87e986e719c4618fba595533ed618b823538228b4e9742e7369cba5f75ef9233da06bba0a8cdadc3a9cce458245c7bd51271d53a9d8c41", 0x54, 0x800}], 0x404, &(0x7f0000001800)={[{@case_sensitive_no='case_sensitive=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@uid={'uid', 0x3d, r1}}, {@errors_recover='errors=recover'}], [{@smackfsfloor={'smackfsfloor', 0x3d, "3af4766d6e6574306367726f7570"}}, {@context={'context', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x36}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@dont_appraise='dont_appraise'}, {@subj_type={'subj_type', 0x3d, "7b2928ad2c25657468302476626f786e657431"}}, {@context={'context', 0x3d, 'root'}}, {@context={'context', 0x3d, 'staff_u'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r3}}]}) [ 617.658271] binder: 29285:29287 unknown command 536871360 [ 617.663947] binder: 29285:29287 ioctl c0306201 20000040 returned -22 01:47:27 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 617.736556] binder: 29285:29291 unknown command 536871360 [ 617.742129] binder: 29285:29291 ioctl c0306201 20000040 returned -22 [ 617.775971] ntfs: (device loop0): parse_options(): Unrecognized mount option smackfsfloor. 01:47:27 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101000, 0x0) bind$tipc(r0, &(0x7f0000000140)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x58080) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="1406002300000099bb45853441"], &(0x7f00000001c0)=0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x4, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x84, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={r2, @in={{0x2, 0x4e20, @empty}}, 0x80000000}, 0x90) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x7fff, 0x4) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f00000000c0)=0x60) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 617.865445] ntfs: (device loop0): parse_options(): Unrecognized mount option pcr. [ 617.889145] ntfs: (device loop0): parse_options(): Unrecognized mount option fowner. [ 617.901071] ntfs: (device loop0): parse_options(): Unrecognized mount option dont_appraise. [ 617.917549] binder: 29304:29306 unknown command 536871360 [ 617.924467] ntfs: (device loop0): parse_options(): Unrecognized mount option subj_type. [ 617.934554] binder: 29304:29306 ioctl c0306201 20000040 returned -22 01:47:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x20}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f00000000c0)=0x14) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') fcntl$addseals(r2, 0x409, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x4c0, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xe000000000}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r4}, {0xb0, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xf0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xec, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r4}, {0x16c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x49d}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x20000005}, 0x44) [ 617.964473] ntfs: (device loop0): parse_options(): Unrecognized mount option %eth0$vboxnet1. [ 617.988046] binder: 29304:29314 unknown command 536871360 [ 618.008630] binder: 29304:29314 ioctl c0306201 20000040 returned -22 01:47:27 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100007"]], 0x0, 0x0, 0x0}) 01:47:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x7dc, @mcast2, 0x9}}, 0x7fff, 0xb77, 0x1, 0x8, 0x58}, &(0x7f0000000040)=0x87) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 618.104440] ntfs: (device loop0): parse_options(): Unrecognized mount option smackfsfloor. [ 618.130200] ntfs: (device loop0): parse_options(): Unrecognized mount option pcr. [ 618.147286] ntfs: (device loop0): parse_options(): Unrecognized mount option fowner. [ 618.156064] ntfs: (device loop0): parse_options(): Unrecognized mount option dont_appraise. [ 618.184785] binder: 29332:29334 unknown command 536871360 [ 618.193108] binder: 29332:29334 ioctl c0306201 20000040 returned -22 01:47:28 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 618.231773] binder: 29332:29338 unknown command 536871360 [ 618.267240] binder: 29332:29338 ioctl c0306201 20000040 returned -22 01:47:28 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x6000000]}) 01:47:28 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)) syncfs(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) fanotify_init(0x10, 0x1000) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f0000000100)) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x3) 01:47:28 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000140)) wait4(r0, 0x0, 0x2, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) read(r1, &(0x7f00000001c0)=""/102, 0x66) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:28 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200)) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:28 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000001, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa000, 0x100) r1 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x3, 0x200) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000001c0)={0xa, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000200)={r2, 0x1}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0xe) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bond_slave_1\x00', r3}) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 618.456054] binder: 29350:29358 unknown command 536871360 [ 618.468744] binder: 29350:29358 ioctl c0306201 20000040 returned -22 01:47:28 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:28 executing program 1: r0 = openat$cgroup_type(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000200)=""/73, 0x49, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x800) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) [ 618.506871] binder: 29350:29361 unknown command 536871360 [ 618.549189] binder: 29350:29361 ioctl c0306201 20000040 returned -22 01:47:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000040)) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:28 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:28 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 618.709780] binder: 29379:29380 unknown command 536871360 [ 618.730346] binder: 29379:29380 ioctl c0306201 20000040 returned -22 [ 618.776520] binder: 29379:29388 unknown command 536871360 [ 618.788482] IPVS: ftp: loaded support on port[0] = 21 [ 618.793770] binder: 29379:29388 ioctl c0306201 20000040 returned -22 [ 618.847568] device bridge_slave_1 left promiscuous mode [ 618.853081] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.907884] device bridge_slave_0 left promiscuous mode [ 618.913309] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.014605] team0 (unregistering): Port device team_slave_1 removed [ 619.024213] team0 (unregistering): Port device team_slave_0 removed [ 619.034925] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 619.098709] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 619.184489] bond0 (unregistering): Released all slaves [ 619.765920] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.772394] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.780366] device bridge_slave_0 entered promiscuous mode [ 619.822812] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.829633] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.837343] device bridge_slave_1 entered promiscuous mode [ 619.877185] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 619.918186] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 620.044921] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 620.090767] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 620.292967] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 620.300478] team0: Port device team_slave_0 added [ 620.339492] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 620.346642] team0: Port device team_slave_1 added [ 620.385581] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 620.392400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 620.407979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 620.431621] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 620.438454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 620.446666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 620.475152] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 620.482347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 620.491117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 620.517896] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 620.524956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 620.540807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 620.836534] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.842883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.849574] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.855924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.863161] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 621.315654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 621.749229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.834332] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 621.925037] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 621.931168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 621.938536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 622.024048] 8021q: adding VLAN 0 to HW filter on device team0 01:47:32 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 01:47:32 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xf3, 0x7ff, 0x8, 0x0, 0xe99, 0x200, 0x10001, 0x9, 0xfff, 0x4, 0x8, 0x9, 0xac1, 0x5, 0xb618, 0x7], 0x10000}) 01:47:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x400000, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:32 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:32 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000080)={0xffffffff, 0x9, 0x0, 0x3ff, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000180)={[], 0x0, 0x0, 0x0, 0x20000003, 0x101}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000100)=""/38) 01:47:32 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:32 executing program 1: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) finit_module(r0, &(0x7f0000000240)='/dev/hwrng\x00', 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x7ff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x6, 0x820e, 0x1, 0x1000000000000, r1}, 0x10) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:32 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1f, 0x3) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x6, 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000140)={r1, r1}) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000180)=0x1, 0x4) tkill(r0, 0x10) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 622.622902] binder: 29663:29669 unknown command 536871360 [ 622.636395] binder: 29663:29669 ioctl c0306201 20000040 returned -22 [ 622.662939] binder: 29663:29672 unknown command 536871360 01:47:32 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}) [ 622.715673] binder: 29663:29672 ioctl c0306201 20000040 returned -22 01:47:32 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x400, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) r4 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0xb4b, 0x80000) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0x3000, &(0x7f0000000100), 0x1, r4, 0x2}) 01:47:32 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:32 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 01:47:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x46f, 0xc3}, &(0x7f0000000040)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:32 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x58, 0x0, {"31867339de4f0442432920428452816de6e0f95b3824680c2afa64e0ba44c2c5220cfe85475ae87d0fcf78eb4ac6180c8745dc47ad6fa738e65d8e4a3a83"}}, {0x0, "3a070923de9da1f7e60128815f4be3c032d3084f008338e3e4db1c23f0124d54c52e198f50eb008a91c761a7afc77823399502d5d3530d9866ad533c0d688097e4635825b025e60d83d006c0049b9ded1cd1bc29540c414e5e36ecac1f452012887c2eacc6"}}, &(0x7f0000000300)=""/74, 0xbf, 0x4a, 0x1}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000140)="8a485a9d6da19c443a930517625542f4fb63f2b62c3d5ca90b9e097dd64b205e69d5942df8a02592ea8c21c0648f86fb27050125cae2a11a265575b351f7e671d9b3a5894946460d3b8ac8aac58ab707b85c9b60f3643a016ebf287d86adf94410275c09ff5571b56cefb7322c0d3e85a0bcfb0607d4c185d103a649", 0x7c, r1}, 0x68) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40001, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000080)={0x7fffffff, @random="f7d776d41762"}) 01:47:32 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f00000001c0), 0x4) r1 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r1, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 622.915156] binder: 29706:29709 unknown command 536871360 [ 622.966811] binder: 29706:29709 ioctl c0306201 20000040 returned -22 01:47:32 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x121400, 0x0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000140)={0xa2b, "b34ed74d79acd7ccf0aac2dfe7701427a3cc1e75c22a4ebbd07e71d986cd6e5f", 0xa0, 0x9b3, 0x400, 0x6, 0x7}) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x5, 0x7, 0x18, &(0x7f0000ffc000/0x4000)=nil, 0x34}) 01:47:32 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000300)={{0x0, 0x4}, 0x1, 0xfff, 0x0, {0x4}, 0x3ff, 0x100000001}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) timer_create(0x5, &(0x7f00000001c0)={0x0, 0x2c, 0x4, @thr={&(0x7f0000000040)="e9afd173bc932879d132e37a5b852997ed1e010aa115e970028c55098d433c30b3d4641a3082b77fb794a7e49e27ca698f5b6ceeb3b69e118c16cee9108fe668c72bd2bd6e407dc9b1ec06f9a9af2b3cd19eca2211ad6b4fe8d6e7c75dd0b545de99cf3550ed5d4b19db0353c1ef4fb459e0f5ba50e21bcafd0a86839c99506b26b3e33ab1d67c9cc81f7c3ad60eab4ea9e3ba1cdc53fddc82bec91a474c17c1f809d23b4e01709a21fbbc6e5a293934380b78d74df58ff5ca770fb5fd52e56c0387803e79ce9b18b8e21a81e2803d6e604a1f33d80e826717e0c60727c3", &(0x7f0000000140)="13c0c6fc37b6b0e77060728e177028e1163b1b1f289e734929b4bed2f084a0b38909cf49306f7c37922e5ef5f0d7f98cbb05137ad1486161454c9896f8b20b68b465418ce777474195cc3de072a2dbcc32542bbc2d8fe1b135ed126bb79efbbc5dc1891eec05d9785db027c65149ab"}}, &(0x7f0000000200)=0x0) timer_gettime(r4, &(0x7f0000000240)) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 623.007621] binder: 29706:29725 unknown command 536871360 [ 623.035119] binder: 29706:29725 ioctl c0306201 20000040 returned -22 01:47:32 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x74000000]}) 01:47:33 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 01:47:33 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0xa000000]}) 01:47:33 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xfee2, 0x80) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x100, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x67c, @empty, 0x100000001}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e23, 0xfffffffffffffff8, @dev={0xfe, 0x80, [], 0x1b}, 0x8}, @in6={0xa, 0x4e23, 0x81, @empty, 0x700}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0x20, @empty, 0x7}, @in6={0xa, 0x4e23, 0x9, @remote}, @in6={0xa, 0x4e20, 0x6, @empty, 0x8000}, @in6={0xa, 0x4e22, 0x4, @ipv4={[], [], @remote}}, @in6={0xa, 0x4e24, 0x80, @mcast1, 0x101}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="f6000000115b65a88ed3ee0def6a62a3684d306c3a8cdc54b671c330c01dd7105606dfef49e0526a75b73c1aad66f4a64fd19880efafd31eb8f8cd4ca5bba8819051f4e001c2449af37ea889493c12dd34690c4a4001a4a08fc5454f4babe0be5627a836c0e60dcb844ea9deb35191ad0be9576cd64fb4e527235e74468b8e677175226c0e98ae6217192e45d7c8a24b1aa08acb76e87ed23d2df8f3f4a5be9bfbbf16a8b6057f787e160d29f02b4ae3ab3fd8eb8d548f5782cd1c618877b00605f54aac177ac81d0bec3f963451b4577a7485a6d87b942017a699caacc2c5631df32eb652120a4965a1e5d0d2e147e298d96078f908005ccaa4"], &(0x7f0000000280)=0xfe) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0xfffffffffffffffe) [ 623.201444] binder: 29750:29758 unknown command 536871360 [ 623.223301] binder: 29750:29758 ioctl c0306201 20000040 returned -22 [ 623.279551] binder: 29750:29762 unknown command 536871360 [ 623.285125] binder: 29750:29762 ioctl c0306201 20000040 returned -22 01:47:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xe2f}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="1600570094f9531c49534da171345dc5fd66415b865cf93f16dc866d83d1ff954708d8ce7f084c6756d5d6f02f854c5668ef3ea1b1a590890e338954d310a6acac7adcb056561a254ef5206ff4db1506a1d1d0018506b443a0df36"], 0x5f) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000040)=0x600) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000000af0b0000000000000100006935786a00570b000000000000002208000000000000050000000000000000000000000000"]) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0x810000, 0x2b, 0x59, 0xc3}, &(0x7f0000000380)=0x98) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) 01:47:33 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x5000000]}) 01:47:33 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x100, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000000c0)={"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"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fcntl$setflags(r1, 0x2, 0x1) write$P9_RFLUSH(r0, &(0x7f00000004c0)={0x7, 0x6d, 0x1}, 0x7) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 623.427410] binder: 29786:29792 ioctl 40086610 20000040 returned -22 [ 623.457314] binder: 29786:29792 ioctl 40086610 20000040 returned -22 01:47:33 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f00000001c0), 0x4) r1 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r1, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:47:33 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:33 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x7000000]}) 01:47:33 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x10000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x0, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8805}, 0x20040004) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000002c0)=0x1000000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={{r2, r3/1000+30000}, {0x77359400}}) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x400, 0x1) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) socket$unix(0x1, 0x5, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:33 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x7]}) [ 623.899071] binder: 29804:29820 unknown command 536871360 01:47:33 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x4c00]}) 01:47:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 623.939497] binder: 29804:29820 ioctl c0306201 20000040 returned -22 [ 623.974520] binder: 29804:29837 unknown command 536871360 01:47:33 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f00000001c0), 0x4) r1 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r1, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:47:33 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) getrusage(0x1, &(0x7f0000000140)) [ 624.016085] binder: 29804:29837 ioctl c0306201 20000040 returned -22 01:47:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x82801, 0x0) sendfile(r0, r0, 0x0, 0x80000001) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:33 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x68000000]}) 01:47:34 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100048"]], 0x0, 0x0, 0x0}) 01:47:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) write(r1, &(0x7f0000000040)="b38bf6a57e8ecd3fd353fe2e34f7d8ffff5355c903", 0x15) 01:47:34 executing program 2: r0 = dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r0, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f00000001c0), 0x4) r1 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r1, 0x10099b7) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) [ 624.225876] binder: 29864:29867 unknown command 536871360 [ 624.254809] binder: 29864:29867 ioctl c0306201 20000040 returned -22 01:47:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40, 0x0) syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) r2 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc5}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) r3 = getpid() chdir(&(0x7f0000000200)='./file0\x00') fcntl$setownex(r2, 0xf, &(0x7f00000000c0)={0x0, r3}) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000140)={0x0, 0x7, 0xfffffffffffffff7, &(0x7f0000000100)=0x7}) [ 624.274013] binder: 29864:29872 unknown command 536871360 [ 624.287356] binder: 29864:29872 ioctl c0306201 20000040 returned -22 01:47:34 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x330f]}) 01:47:34 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100068"]], 0x0, 0x0, 0x0}) 01:47:34 executing program 2: r0 = dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r0, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f00000001c0), 0x4) r1 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r1, 0x10099b7) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) 01:47:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xffffffffffffff30, 0x141000) accept4$bt_l2cap(r2, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:34 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0xa]}) [ 624.517065] binder: 29899:29900 unknown command 536871360 [ 624.542389] binder: 29899:29900 ioctl c0306201 20000040 returned -22 [ 624.598794] binder: 29899:29911 unknown command 536871360 [ 624.620673] binder: 29899:29911 ioctl c0306201 20000040 returned -22 01:47:37 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x3]}) 01:47:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x7}}, 0xfffffffffffffffc, 0x9508, 0x20, 0x9, 0x200}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r2, 0xfff, 0x30, 0x100, 0x6}, &(0x7f00000002c0)=0x18) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/load\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000380)={r2, 0xfd, "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"}, &(0x7f00000004c0)=0x105) 01:47:37 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:37 executing program 2: r0 = dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r0, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f00000001c0), 0x4) r1 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r1, 0x10099b7) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) 01:47:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x100, 0x181200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000080)={0x7, 0xfc1, 0x10000}) 01:47:37 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={0x0, 0xbe}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r2, @in={{0x2, 0x4e20, @local}}, 0x5, 0x3, 0x0, 0x6}, 0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:37 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:37 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x7400000000000000]}) [ 627.253485] binder: 29926:29930 unknown command 536871360 [ 627.271483] binder: 29926:29930 ioctl c0306201 20000040 returned -22 01:47:37 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]}) [ 627.317071] binder: 29926:29945 unknown command 536871360 [ 627.344989] binder: 29926:29945 ioctl c0306201 20000040 returned -22 01:47:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000600)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="099cda6ecc1dc2d3f416c90e1ef61ac0c78c"], 0x12) ioctl$TCSETA(r2, 0x5406, &(0x7f00000000c0)={0xfffffffffffffffc, 0x0, 0x0, 0x100000009b4b62b}) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000200)) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x17}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000040)={{0x6, 0xa000000000000}, 0x1, 0x2, 0x2, {0x401, 0x84}, 0x7, 0x3}) 01:47:37 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:37 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f00000002c0)={"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"}) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x200, 0x8c00) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4840}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r4, 0xe02, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}}, 0x8001) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r5, 0x111, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x6, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000800)={0x0, 0x1f2d, 0x2}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000880)={r6, 0x8}, 0x8) write$FUSE_STATFS(r0, &(0x7f0000000200)={0x60, 0x0, 0x4, {{0x8, 0x6, 0x2, 0xac3, 0x1, 0xfffffffffffff801, 0x2, 0x3}}}, 0x60) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:37 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x301000, 0x0) 01:47:37 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x48000000]}) [ 627.544495] binder: 29973:29977 unknown command 536871360 01:47:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0xa00) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xe9b, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000240)={@rand_addr, @remote}, &(0x7f0000000280)=0xc) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$nbd(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="674466980000000001b3667e5c000700e358297255a352999edd5ce9778f84"], 0x1f) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000200)={0x3, "d454d1"}, 0x4) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 627.597699] binder: 29973:29977 ioctl c0306201 20000040 returned -22 [ 627.662035] binder: 29973:29995 unknown command 536871360 [ 627.684742] binder: 29973:29995 ioctl c0306201 20000040 returned -22 01:47:37 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:37 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100074"]], 0x0, 0x0, 0x0}) 01:47:37 executing program 4: prctl$PR_SET_FP_MODE(0x2d, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:37 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x6c00]}) 01:47:37 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000200)="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") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x6) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000300)={0x2, &(0x7f0000000080)=[{0x6, 0x3, 0x7, 0x2}, {0xfffffffffffffff7, 0x800, 0xffffffffffff0001, 0x2}]}) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) [ 627.848206] binder: 30015:30019 unknown command 536871360 [ 627.872652] binder: 30015:30019 ioctl c0306201 20000040 returned -22 01:47:37 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 627.906429] binder: 30015:30029 unknown command 536871360 [ 627.918192] binder: 30015:30029 ioctl c0306201 20000040 returned -22 01:47:37 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="92000000f02db59dc9bde6866472a13e3c358c22eedcf1971ab9f6ce3387b6c4252f96294455dcaccc55728581ca6c6ddf94180a2afbb055e78c91b4028d5aa228df7b18c19300d7d17886e97695cfae5bddd8ee270b1f81bb4147ae8f9064d6b29ed6011e7cabcf48733c7afb5198070e36d1d966e446d969de739ec616bf7732a57c479fdd77f07079c0d987af31cd3215b44de465"], &(0x7f0000000080)=0x9a) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000002c0)={r1, 0x7, 0x10, 0x81, 0x1}, &(0x7f0000000300)=0x18) r2 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0x0, 0x0) connect$pptp(r0, &(0x7f0000000340)={0x18, 0x2, {0x1, @remote}}, 0x1e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000003c0)=0x6) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000400)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 01:47:37 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="000000000010007f"]], 0x0, 0x0, 0x0}) 01:47:37 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x500]}) [ 628.054999] binder: 30042:30044 unknown command 536871360 [ 628.079999] binder: 30042:30044 ioctl c0306201 20000040 returned -22 [ 628.117972] binder: 30042:30050 unknown command 536871360 [ 628.136141] binder: 30042:30050 ioctl c0306201 20000040 returned -22 01:47:40 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() setgroups(0x5, &(0x7f0000000380)=[r1, r2, r3, r4, r5]) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x101000, 0x0) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000400), &(0x7f0000000440)=0x8) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x191040) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000000c0)=0x1, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) open(&(0x7f0000000100)='./file0\x00', 0x2400, 0x153) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:40 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) poll(&(0x7f0000000200)=[{r0, 0x80}, {r0, 0x4100}, {r0, 0x40}, {r0, 0x100}, {r0, 0x8080}, {r0, 0x1000}, {r0, 0x10}, {r1, 0x40}, {r0, 0x6060}], 0x9, 0x401) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:40 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:40 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x48]}) [ 630.760892] binder: 30061:30063 unknown command 536871360 [ 630.785282] binder: 30061:30063 ioctl c0306201 20000040 returned -22 01:47:40 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x74]}) 01:47:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) connect$tipc(r1, &(0x7f0000000240)=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}}}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x1c) splice(r2, &(0x7f0000000080), r2, &(0x7f0000000200)=0x5, 0x1, 0x3) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:40 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x1) write$UHID_INPUT2(r2, &(0x7f0000000080)={0xc, 0xf4, "c0f0527ee3e037ba6ee9cd7ca509004d5aa1a4d5e02e871efc5676727ec5d3505d0a467719eb3ea757ea302cf85d40a19de1297bb1718e2f5c87ea7dd498657f2693e3645f74f5dd939a43314c888886a46d0f9adb759df97b38413237bbc1f6e009f482efa8193cf787de7558f28f91f9517196ffc68bfa499a25098fe6dd3a284b763c95320085e8f909d1d998b234f6bf92beef13635349c39ccf8c03baa551c500d9aba0f8a7bbfaf316d34ce79552409ba18d83f46317a115cd02b52ba63f685bd23bfa6341ed777842d25ced30b89ae61bce8a98d81c819516af6e0a88d4148c1b3f56830210435ac6fb71fe975654e41b"}, 0xfa) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 630.828213] binder: 30061:30079 unknown command 536871360 [ 630.849078] binder: 30061:30079 ioctl c0306201 20000040 returned -22 01:47:40 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:40 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x402, 0x0) 01:47:40 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) 01:47:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0xfffffffffffffff9, 0x4, 0x4, 0x1, r1, 0xf44}, 0x2c) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x40, 0x81, 0x3, 0xe, 0xa58, 0x3ff}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000200)) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 631.061877] binder: 30102:30106 unknown command 536871360 [ 631.080095] binder: 30102:30106 ioctl c0306201 20000040 returned -22 01:47:41 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 631.120169] binder: 30102:30114 unknown command 536871360 [ 631.154230] binder: 30102:30114 ioctl c0306201 20000040 returned -22 01:47:41 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}) 01:47:41 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 631.203444] binder: 30121:30127 ioctl 81009431 20000200 returned -22 [ 631.237229] binder: 30121:30131 ioctl 81009431 20000200 returned -22 01:47:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x100, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000200)={&(0x7f0000ffd000/0x3000)=nil, 0x8, 0x4, 0x40, &(0x7f0000ffe000/0x2000)=nil, 0x1}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x1c) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:41 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:41 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x40000000]}) [ 631.381811] binder: 30139:30147 unknown command 536871360 [ 631.414520] binder: 30139:30147 ioctl c0306201 20000040 returned -22 01:47:41 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 631.443660] binder: 30139:30155 unknown command 536871360 [ 631.461361] binder: 30139:30155 ioctl c0306201 20000040 returned -22 01:47:43 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:43 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:43 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'gre0\x00'}, 0xfffffe56) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xe) ptrace$cont(0x18, r1, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000200)=""/161) ptrace$cont(0x1f, r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x840) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000001c0)={0x0, 'nr0\x00', 0x2}, 0x18) write$apparmor_current(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='stack keyrin$\x00ppp0lo'], 0x14) 01:47:43 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x6800]}) 01:47:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x3, 0x10000) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @broadcast}, &(0x7f00000000c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', r2}) syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x0, 0x2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) acct(&(0x7f0000000140)='./file0\x00') ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000180)=r1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000200)=0xc) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:44 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 634.136373] binder: 30171:30183 unknown command 536871360 [ 634.160057] binder: 30171:30183 ioctl c0306201 20000040 returned -22 01:47:44 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x6c]}) 01:47:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x6, 0x7, 0x8000, 0x8df9, 0x4, 0x4, 0x2, 0x101, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={r2, 0x8000, 0x3, 0x5}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={r3, 0x8}, &(0x7f00000002c0)=0x8) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 634.196195] binder: 30171:30192 unknown command 536871360 [ 634.228941] binder: 30171:30192 ioctl c0306201 20000040 returned -22 01:47:44 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100003"]], 0x0, 0x0, 0x0}) 01:47:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:44 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:44 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000080)=0xd006) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 634.351337] binder: 30208:30210 unknown command 536871360 01:47:44 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 01:47:44 executing program 0: r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$cont(0x18, r0, 0x9, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x400, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000340)={0x6, 0x0, 0x1, 0x10000, 0x0, 0x100000001, 0x5, 0x2, 0x81, 0x9, 0x5}, 0xb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x208002, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x200, 0x4da, 0x0, 0x5, 0x14, 0x0, "0c82fbfdac39ed58c5168b556370b766488c33d7c3a195751354d1667634890420245c788b8065d33fc9941ff85cebea51bfeea4e55b76a830600492823bebfd", "0f2846dae74eb9d2926e80ae03559ccc2994f8510eea6562eaeab6abf819a5eaad758b65c3df102d8e231ba99e24ec7400f1700762fb8e4e507b320785b2d378", "72f588e0cb12fc7912952ae5ea91488f9150bebb6ac8d036d7cebdd5329f673b", [0x800000000000, 0x1]}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000240)={{0x0, 0x0, 0xe49, 0x0, 0x9}, 0x1, 0x10000}) r3 = accept$alg(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 634.414438] binder: 30208:30210 ioctl c0306201 20000040 returned -22 [ 634.446530] binder: 30208:30224 unknown command 536871360 [ 634.452205] binder: 30208:30224 ioctl c0306201 20000040 returned -22 01:47:44 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:44 executing program 1: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:44 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) write$selinux_access(r1, &(0x7f0000000040)={'system_u:object_r:mouse_device_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x3}, 0x67) 01:47:44 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}) 01:47:44 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x20000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0', [{}, {0x20, '{&'}, {0x20, 'selinux'}, {}, {}, {0x20, '\'(vmnet0[!lomime_typeppp0,'}, {0x20, '@+'}], 0xa, "076a28266e3667749e8618b11d056f079c825b4606535a8d001067750deabed6319553e6d2c559e520987aea406f4f55ea1ba36b281f98b900"}, 0x70) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000040)={'filter\x00', 0x0, 0x4, 0x1000, [], 0x9, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=""/4096}, &(0x7f00000012c0)=0x78) 01:47:44 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 634.672977] binder: 30243:30245 unknown command 536871360 [ 634.705997] binder: 30243:30245 ioctl c0306201 20000040 returned -22 [ 634.721096] binder: 30243:30252 unknown command 536871360 [ 634.765440] binder: 30243:30252 ioctl c0306201 20000040 returned -22 01:47:44 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/hwrng\x00', 0x4001, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000001600)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_open_dev$video(&(0x7f0000001640)='/dev/video#\x00', 0x4c, 0x80) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) poll(&(0x7f00000016c0)=[{r0, 0x80}, {r1, 0x104}, {r2, 0x212}, {r3, 0x4000}, {r4}], 0x5, 0xfffffffffffffff8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0xa0841) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) sysfs$1(0x1, &(0x7f00000000c0)='\'nodevlowlan0eth1\'nodeveth0[\'vmnet0$/}em1proccpuset,\x00') vmsplice(r5, &(0x7f0000001540)=[{&(0x7f0000000100)="b90b4f5eba77b5f19683e756d76ffa471d05d13cbd7cf406797c6be9da2e7f67d69a5945f0d4a038bb54b93c68c4f822e7a280357396413e233460a481dd7a0d8b8a9e26e27101117e13a2fe930afce9896d23978622bb9ff984583b6508ef4d", 0x60}, {&(0x7f0000000180)="1edbb09903dff41d312ad6ebc37b8cc4401f55c8bdc27d916abfc6542328049dbc9721364439f7aa480fe842f8347b0b28808bd9bcaa6cc1d1176823b8e126faeab376890a5b428f992bd8dba6a145213368c4c3b51c73eb0482bd2cb869a0c6e0321b7a65c03b43ad3f98db653ed54660f4dd1b58277f56673263f8", 0x7c}, {&(0x7f00000002c0)="a9cc8806c009c11a44aec2e45cfd2842285d44139cd5e30351cdf90f74f86a56bdad674657cf7530b47190dbd10ed8fbdeac4bea304fd7b25271eeb08c7cdc33b43f474551099394bcc26ddd3ec2c29d95ca44872bf41dd7b8f355e9e283344f4c4b51134b13fe381ad2eedb06153062dddb665f873167feb5e245512fb7caecd9afdba8c3043271469b465a77f2b1f5df3401a2347b98ed87b3f0da9902511f5586ade378d3bd55e0afea7214c26195701bfcb74dcc035852fbd60fa53376c200df8a7ee08834b84aaac30d961fb63a2e5a26ac0e060ea12ebd2d04", 0xdc}, {&(0x7f00000003c0)="8524d55d435dc59515a382fc1efbb3818dd268f1e3720cb094544e5c9d892523decd4b954477ed3d84f8c40fb202ecf934cd2975896e80a9b12de092e1a62cc6681b5b27a8be79c120f914b117530a2f64ac9fff8190557df06ec764fc10d57ba13e87d1e47ff0b62b816220601a999aa60115ae8a0591a2a15ef86371116a18d2fa1314d9cf8db867dc644fac3d6b3f2c8beb62b82ea98d7564b3b7853bbf217fc197531b501eb54f548d523f994cbc9c29962bd0af3c809d5a20c9c5c24e8d0a3bcf09a1dbefd05129ef77e9fd80a5d154c81cee229c071dfa628c65809f4cffbc528dfec9cce0a656e506d3f92ea19a598601451ed90d8df3afb3b35a3a8d3259090bc0b0edfb2bd3599319c79fc736c5442a26012043267f6249504223b71f4969892727ab035bdc63379f96bda02e074ed76e012259fe550f2d336be312f31f819fff93cac3384b58b86d884871e89b8320eb5ddaecad257bd2ddcfbcabf545dfba7ae75190c09dae5f40614eaac1013364ed3ca66f0c93b3c51896207543728a1c6f94c6ace74f20dcc06f3aad40303e27b1afb2900935d673c4a4a7c2fcd9f332b987a4da41e7f48e889413bbff2c0c81836a28d007c1423edebc768071db70dc7cd942d13c5fc8fe088884eb22d580563496f8c688457ed85a6c32d0f11ca6dc670220d521f0e93d937ab0022ada22b1152f30ca96889c37368ac41b7a4a342ec449504a54283a0a2aa50c2f6c675aab3f3b49db82dfc3332c1c18be1dbd7327a3f9be7624d56ad55d12a3b9273a4621d6f42b035656b372ddd20c7fa10e91ccb7f735daa3a9191dc452211e404e452eae05a26cf1f5795ddba9facd96bdf9c77eb0f2f0902f219ace90514a7e5d36c22d8798e5e50ffa4be865852d770d9777dcda7a2b67d1a366c8048f55436de8138af03d78d9c8e10283ec35a2c89c58e6e62a71d38a1ee6edc6ced30c6e9bd975c20f059448094cf19e5d0fb4f986fdf000732053516ae1a35877561c82878afbe20e7ce32f35c3391072a157e536e95926c24e60a3ed952b16c5ab5e5cdd7e5e0b118f9539d5a76e79529c30c3c12e3d0133e4801e24dbdcd082476045107505de01caeea575f200cd7832176a3b70fc862e0b9b057157ac31acc1ea13e6d962494001dc718662cf56fd5fa37679c844eaa3d4d15a3c5d866c0b73a7d82810d7eb9104c2ce535dcc78fedf54774a5a06de9c00cd3f4a8893247a703193dbe720c99ff4196ff37972ddf1487093e7e75eead88bf3c2494799e2a606b335c5e40578fe34788077fed7d1ac178374c40ce8a755b375c432804f8acc5e1d3e4cbc4443c1161ef806f0c4bd837ac8524e56545c13a0c632f7688c52ed08d1b62cebea2da7e32ce7052ffa3978ed9a8f0ca3fa8fa9bb64324f1283a94a20e288235e9a09d8525795796059cfbe87a8384f0f38e6afebd17d2e6430038d0d9c5cd042b1a82a04ec416162b9984703b93cb5edf2df20d2074e6e73fa89516455ecea92a5927ff594e0844ab119637db206bac241646a1523cd5ac4f5490700897d982bdd731b6d6b5af77393113027eef10d57d5203bdb58eb085e8772842e4cbbd2f69941287783ac027eb4af3d398eee07028b19881518eed9c9d68581ab70abd909be5315dce14a75bc246bef26a7c2c7929cfdaed9d8229a95c22af3ca58d1baf3baed49c1a46a3d8f5cf88599f5db38133bf436b1a64e1aa1be550ecdf826891183dbf4f985d52c4351f2d71b80de4ea4c7c5a7d24bfe8b6cf7fec8ce3107771f2eeacc21942c14519670deede87ee10a44c57aacdc767c672728a2caf64312c4d247ec4334dac91f038d124206235ac14325c87e56562304ba31ee638540c7b1cf015c04023d11a8836c2aa94a8cd644b867e0df988176af6076c5c2d9908519ce52f4004ef975c83d48e637c44bacd62d10589b8b8f35d3441659906cff671335d6ea2a81cedd092b00a59b99872bce7dc84dc47cf403afb06170274d74c8694ccb1b64869f51a81fd4e52421ea731df36127e6371ea7fc2830df96ffcfd29e7e2d0271a72b7f670dc10a4741a22bc0d256ee1700eff2d1b4d769b72dd0c358dddae94f209ac78c7eb09e7f61df0de7fb5c66e7bcce1dc525f7f88b5045c3531dc6f92053c2fd623da3154b42f51460c7839d42e6c7ad64dc62cffc2b353b254d05dc98a4e3664024aba26b1d459a6620e6e7b2762c425672f096e3f9330e45eeeb08f5655c861d3e331e89f291e4c14078bdc036514f9551cd8d0c316eea714d91b9387512e2cf7e1efe6dfa289fbd007d3ec57d7d5da5cccb558294948e5d7e571544ddecf1ef6c8b1912cc22ec5af255a9f278ef41d7937c64fb88841ad160fcbee1a4013fb4c813de232e073709cdb6e03f32e06346f226d46ea2b91551910fce93412f923b0e5857ce880d26a7bfb9095a5cb08907d992f056031498c502face71c3036da780f211f7a634d34e7265ef013ef9639e12ff5b0e2b3ae9cb3a10394832328a4131141da04e18d85f51cb9fd143ed57c08c316e6e1dfde9ce4e104442ac24560a5d61fcc4d86449761a83b683e7bf84259633799a92a6561d4115df6d88a26f9448490b16c247d8d60a95bd53f4f0c87e1c06014f906ab112ac0d9951ed4ba3e50630bb768b12782e36c83d96aef1790af821e9f5b10ced7205ecc1739f479d6033de0d5ca5ee56d18247d56b9b01f1ab205bef9e5394d3bb5c4f59ab2f8997c444bd25ae875ec9d33841dc57631bb09f2b8dd6b8b4b320055bc2b72f38a7a9a18fd85e98ba4e904362e9ab5a227702d75167e9c4cdf0205c7eaae38b2939b9b4077e2e89de2ee2168e4fbe4b66c7b21e09f1195e6c6e9d1f198dc976a08fa28272f7247cf89f58dc2c62f77166da2eb27211ab1d7020b6568d533c46fdc25565819678b01049bebb253c2745319ff50ae1c61829959bbc265103d3d61daf4c02d534b2db7a9f8e517aa8fc9c3ba567948b41d55c5c859bf59c04b61016f153062132524445a5ca7896494f80189baf7f48d52de6abc637c5331261e27915329eb69a8d073a4b720e58ed9f379fe29d0f51c9c20690b43344bc8b3d3bc8211f2fdf3fe4e13037551433190f90fd7e1fe992d1ca571c72cf1664f27a526946eb2fbe2afbd0e1547120829a8734ad954c756ce45bf22d48ac0e9b772d884614666f626a7ab5e7b94b13b1279c5c7a6a114c316b7ab60ef80043134c31634ca67c7b31e8154866a3776bd6faccfb5604d694a94766c6360ef0e9ebfbf638a0f8153d0bc9df332a97c8761097ae99f787ca2ef772ec7bc4a90fc0b5f3aeeb489f4676fcf3bebe5d68e92e8b410411d0804e5e023042de15636bc961b4f02fcec6e699a8a9e1237434e5ecc03cd6f9fe6eb1df378fa070412e731889da8cfca46fa50ce0449a054bf43d5149ea9548a1fe3ac9d22f351fad9069b423385a27da0e76e5595ddf854d688a3eda7ade312c909f3b36e08e754be14a0122cd6bfddca06425194d47556994a006dea1892943e350e351a81facddcec6760d440d277b4af57f547a4101e183192e5670e3c98a38c087ca5209ce4aba75a7620bd3cbe5122f550a571a0114d7cb3885efa3957ffd45a80908a0c9fb86a8d32d8d2904a300a6656d07e02014c65152d2965518b0a3cf67a5f48ead244af34620f422d7d3b13cd1ad26fbcbaaa7bf9d10743e15b3fbbd4f6816512b2cfb8703bc55b7a5a17303c15526ad3b7d6e40982c5925570afd7959aa53c652442b8b733ffd82d3bc53d33376b03fb1baffe99955b020bd9b9a7a87d3f96d2fa0071a8e551dc1b3f7ed0010fd840ab0bf3ce2e45c20d495cc42a302262eb93c0be85d2742908bf5237f96c16e8924d41a1659e04b714d84988b1fadfb4634f21ca15ad4184084033f7681067edeb05af84fdd1e63ac7bad0a185947491781d1b514c8d6ba94acabeba9679fc6ae3339059fcfa8c1729cd04a05fbc127d4af3673e4ee302bff410cdb6a2c04d204d8811d6da72b6db5c2d69aef76134ac8fa0d68c0d5edca001f9c2c171232d21faa75666f5ea56ebc509c41e4fe6e3d27dc09c3aaead3e942d88bbb3077ef387e5eb7cea4675efd89500ea97808ac08bbece34a6d582c932292c650203a84238a87f1e90ca19c0aed967a5b8682cba5632c045ac9c09f8c049c695de210777a92b8cb978a36a5cf592e9233464c0341406220142a0543984d4fa35bb3db4bac08522e70f1d41e6318898a63d45fce510efa66038e2ee2bbd76df2f33e9800f1964c7fe759f3a3bfae8825017a405336b4fe5eea61040057bed355bb81feb2a4299cce394052a25199c6d83b8ae59e7f55247f1b4fa1f1762c6f7870af2a150f6f2a19cb14eaccd2b42985f02c4d7dadf1b1b650e4e4b46f7bdd3d21906fca8d8bcadb9182ef2c5dadcaaad4ec9edd84dbeef430dc17c0b0428836af713a08c65729f1e08fe36fc28dd8578801d880f7d8475a3e777795eb278ef30f50dd75b3e8db01aa9bc02ac3e83b42691f87df78b137ac3bdc53c1902cc46a2b975830f1a02ed6ab1a66d114cb1950641b32798dcbbde4c71f8ef3fa87ffd0053607a229ee7ce08f55c3329dbda45aa0d50c869f735a965afc64141be6ec45dd3607d67e91bfb466ed278493db95098c6dc56cf95fc5ec8701e848c080618013028a3dd84164bd9acc4560202b53a0975e8324e15e65a8b797679533dc8ee958d24c5327a42a3e957430ed63c3b00804905c265c446246ba25e9030c56b868fc7233cc5c5d4ba9062d024860eb28e7567ad7b8e20e5d7ff05959aac00a59b5533b8c658bb815f3940084d8324c12d23bab3362dd758e9dd5cec00f6f049ab4c1b406aa85d05a65c7e5a2e54aaefd29e38563273eadf644c27f898a2be38568597c5259ff23279e1b9a81c27ee0c9064f29059558ceaaf28195ed5013ec56d580dc0a6af7ec838b882e7e8b7d4b95a9480de30f5d16d2c64de78157542f83f47ada592f10276443a2fc986e01b26047cc6002ad39aa951a7d268cb4883044f3eb9de43ffeb12a5d77bea7b8a2ef1295c66005cb7e3b6179e8a010ddae70ceaf5373aa302d338dd6998cb5cbaebd66f1beb8a09d62210a2dcdc457ebc5d1b6a4479c904dbca8c449a0aec9a8b1957cb9e23cc66a805abc360b0a2e59063440e469542d7ce27fdd97c043fcaa4386e2954039d90bbab038314335f1fa05a2c5838166c042d1088e5ab1c09b92c3998a8ae00f32b49c3786aa4aac9a126028eb1fb95250f1b3098988c6b2ace738f58d5955f759d735ed17577a335a3204061779788932cbed81bf8b826505b0ddeb44ded7585d02423e47c10300c369b20c3fa4f9258397f839187d620d1245409071ed1401b9d2e147d39f20f6be289bc61c8cdf2490f44e68814035e4f8a17fa280a90e1d16720bbb96f17d05b2a23fa1bf18cccd022fbafa1bf0ceacd2ad9b52ca6e8460f94aa387cae7d2fda0d1b19a034428c58e1f2f21d5711af448eac65ada42120c088aac82954b4b88f78a29131690bc6c7a9eabe5185603516b4e855ad4d843ed790fda4727952e28d83086d16f3b678c8c01b0e5efcda5742355beb5abc913dd8c1d87334e497f9bc3a8e87c0187fc14dc8e12e8e18cd84cf4fafd89104299910b32ff108879e11f5c6cf191abe195e15de58f4be1ab57fe0c8d7e17d85324abec10417c1e955a427475b5779f0593de03e3d29da40fa7a5e50e17b035232a5c4dc244ef7ddafdeb973d28c5f8cb69665bb8f508e5ef39", 0x1000}, {&(0x7f0000000200)="0964cd6bb6e5bae8c2f85a03d623340c8dd678008518880d5f8e471f20fb912feed54a0826afdd60468dc069d8500327dd1f464549de90097107cb6d", 0x3c}, {&(0x7f00000013c0)="a28312e2cfa52a73c8c9c43c5397a7a8d11a0b4ec6dff74c073bd7e00c0af24199793ca9dcf0c138f9da0d5f00f7142f19bf5409284bed1da743671dc021e4f386ededc22df3082aee22bb12bc92fd5fe826745af265a32b49c54b7ceef74943753e6535e4c4c27e5ce9ce1f", 0x6c}, {&(0x7f0000000240)="a6fa2f3e6d7997", 0x7}, {&(0x7f0000001440)="b1dda749bcdeca9ff3d426eb1a6fed1795c77c24e149f91130449a5ab9e5eebd18cfd7cf55f6d4380f40028015c592a01a5948eebb41b8463703cfee767a4d01cbce77448da9d2cf33b51e4dc3c23e90a50d605f2294d4bd4321dd45f5e8b1a86a8284dc69dcd411f7d1b44f59e21bcb4ca6504b1fe465443b2e7a442ea947d69a5e0a2376ea9643b74e0c5b4603b0715144a6eb63a2940769a09ec1f4361ec1304b057137904828739ab45ce4f56957c3d2c95e12bc95813a395476aaf3f1f3f4f6fe2daccac2ca6b8ac28e884437c02e0d4ff0bec2b5a421f031ebf382275910f82c2db1dbe7264301b76cff6e", 0xee}], 0x8, 0xd) 01:47:44 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x45d, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r1) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:44 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = semget(0x2, 0x0, 0x42) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000140)=""/249) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101, 0x0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x100) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:44 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 634.946239] binder: 30269:30271 unknown command 536871360 [ 634.975668] binder: 30269:30271 ioctl c0306201 20000040 returned -22 01:47:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) setrlimit(0x7, &(0x7f0000000040)={0x80, 0x6}) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 635.013385] binder: 30269:30279 unknown command 536871360 [ 635.052002] binder: 30269:30279 ioctl c0306201 20000040 returned -22 01:47:44 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:45 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x330f0000]}) 01:47:45 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:45 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:45 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:45 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000040)={0x3, r1}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:47:45 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) r1 = msgget(0x2, 0x420) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) getgroups(0x1, &(0x7f0000000240)=[0xee00]) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000440)={{0x200, r2, r3, r4, r5, 0x100, 0x10000}, 0x2, 0x1, 0xfffffffffffff801, 0x0, 0xffffffff, 0x8001, r0, r0}) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x80, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 635.524466] binder: 30309:30311 unknown command 536871360 01:47:45 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) tee(r0, r1, 0x1, 0x0) [ 635.568330] binder: 30309:30311 ioctl c0306201 20000040 returned -22 [ 635.605340] binder: 30309:30326 unknown command 536871360 01:47:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000200)={0x0, 0x7000}) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/110) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x20}) fsetxattr$security_smack_transmute(r1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x3) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000340)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$selinux_validatetrans(r4, &(0x7f0000000140)={'system_u:object_r:etc_runtime_t:s0', 0x20, 'system_u:object_r:ldconfig_cache_t:s0', 0x20, 0xfffffffffffffff7, 0x20, '/usr/sbin/cups-browsed\x00'}, 0x75) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x440800, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x85e, @dev={0xfe, 0x80, [], 0xf}, 0xb93c}, 0x1c) [ 635.646413] binder: 30309:30326 ioctl c0306201 20000040 returned -22 01:47:45 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:45 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4000000000000043, 0x0) connect$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x7, 0x0, 0x3ff, "3a0c350bfb5705bd9269a432cc9d8f2d001de9fccff4f12537898f7b63f742c47d61bcd65d2f078ad125e6b5dd9802421e791b370d9c98477c50afa2d2a1ed", 0x21}, 0x60) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000080)={0x3, 0x4, 0xbe6, 0xfffffffffffffff7, 0x11, 0x5}) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000001280)) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000200)={r2, 0x2}) [ 635.831256] binder: 30347:30348 unknown command 536871360 [ 635.845704] binder: 30347:30348 ioctl c0306201 20000040 returned -22 [ 635.864217] binder: 30350:30353 ioctl 40086425 20000200 returned -22 [ 635.877617] binder: 30347:30355 unknown command 536871360 [ 635.884726] IPVS: ftp: loaded support on port[0] = 21 [ 635.893919] binder: 30347:30355 ioctl c0306201 20000040 returned -22 [ 635.972471] device bridge_slave_1 left promiscuous mode [ 635.978916] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.026501] device bridge_slave_0 left promiscuous mode [ 636.031960] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.113752] team0 (unregistering): Port device team_slave_1 removed [ 636.124347] team0 (unregistering): Port device team_slave_0 removed [ 636.134192] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 636.179114] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 636.253789] bond0 (unregistering): Released all slaves [ 636.827076] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.833529] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.841588] device bridge_slave_0 entered promiscuous mode [ 636.882859] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.889335] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.896645] device bridge_slave_1 entered promiscuous mode [ 636.936725] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 636.978608] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 637.098939] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 637.142553] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 637.335820] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 637.343120] team0: Port device team_slave_0 added [ 637.383287] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 637.391014] team0: Port device team_slave_1 added [ 637.430684] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 637.438328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 637.455108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 637.489394] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 637.496683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 637.504411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 637.534561] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 637.541610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 637.550616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 637.586178] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 637.593238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 637.604645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 637.893551] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.900016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.906650] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.912986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.920136] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 638.445707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 638.808698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.896346] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 638.981046] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 638.987393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 638.994321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 639.085809] 8021q: adding VLAN 0 to HW filter on device team0 01:47:49 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x3f00]}) 01:47:49 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x417, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) getpeername$netlink(r1, &(0x7f0000000080), &(0x7f0000000140)=0xc) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:49 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/75) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x20}) 01:47:49 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:49 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open$dir(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x369) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 01:47:49 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:49 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:49 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x7a]}) 01:47:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0x0, 0x2000, 0x0, 0x0, 0x20}) [ 639.657270] binder: 30631:30634 unknown command 536871360 [ 639.677938] binder: 30631:30634 ioctl c0306201 20000040 returned -22 [ 639.751520] binder: 30631:30656 unknown command 536871360 [ 639.780877] binder: 30631:30656 ioctl c0306201 20000040 returned -22 01:47:49 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:49 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x200000, 0x0) syz_extract_tcp_res(&(0x7f00000003c0), 0x10001, 0x9) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x10, 0x7, 0x89, 0x4, 0x5}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000300)={r2, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000280)=0x84) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) r3 = getuid() r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, r3, r4) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe1000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="6536440f06b805000000b9370000000f01c10fa145d8d647c10cce00c74424002e010000c7442402d6450000ff1c2465f30f5114f3450f01ca440f23cc400f73f187", 0x42}], 0x1, 0x1f, &(0x7f0000000180), 0x10000125) r3 = dup3(r0, r2, 0x80000) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000180)={{0xbf, @broadcast, 0x4e20, 0x3, 'fo\x00', 0x3, 0x0, 0x61}, {@local, 0x4e21, 0x3, 0x3, 0x8, 0x6}}, 0x44) 01:47:49 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x4]}) 01:47:49 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x68, 0x0, 0x0}) 01:47:49 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 01:47:49 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x7, 0x200040) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x17, "e196635f7fc52a7d37629241d128645c9b4f1e65ee98bf"}, &(0x7f0000000200)=0x1f) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000300)={r2, 0x7c, "4506101e070648c4c5ec2f5ed088e48621ed67fb65ca94d5e1b43a8c0e0bc39a0782e1c94aba54aaf8a65588641f5c653efd2151be7723a5344ffe99187f722a2a72debe17c4005f6dde6850a62d684888584f00ee8a96e43adbfd408070a720e67924319ce0ea446d3731c7ba5294b00d9b17a18748ddb72f72c638"}, &(0x7f0000000240)=0x84) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={r3, r4+30000000}, &(0x7f0000000140)) [ 640.079525] binder: 30676:30692 unknown command 536871360 [ 640.085299] binder: 30676:30692 ioctl c0306201 20000040 returned -22 01:47:50 executing program 1: 01:47:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 640.126874] binder: 30676:30696 unknown command 536871360 [ 640.137296] binder: 30676:30696 ioctl c0306201 20000040 returned -22 01:47:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x20}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f00000002c0)={"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"}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0xa}, 0x4}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0xc1ac, @dev={0xfe, 0x80, [], 0x16}, 0x100000000}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e22, @loopback}], 0x78) 01:47:50 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x4800]}) 01:47:50 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x3, 0x0, 0x0}) 01:47:50 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x37e, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:50 executing program 1: [ 640.335048] binder: 30717:30718 unknown command 536871360 01:47:50 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x68]}) 01:47:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:50 executing program 1: [ 640.378160] binder: 30717:30718 ioctl c0306201 20000040 returned -22 [ 640.393389] binder: 30717:30737 unknown command 536871360 [ 640.404264] binder: 30717:30737 ioctl c0306201 20000040 returned -22 01:47:50 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0xffffff7f00000000, 0x0, 0x0}) 01:47:50 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2) tkill(r0, 0xe) r1 = epoll_create1(0x80000) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000140)=0xbe8) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f0000000080)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x100010, r1, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000240)=0x10000) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40000, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000080)=0xc, 0x4) 01:47:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:50 executing program 1: [ 640.553802] binder: 30752:30754 unknown command 536871360 01:47:50 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}) [ 640.617021] binder: 30752:30754 ioctl c0306201 20000040 returned -22 [ 640.655102] binder: 30752:30771 unknown command 536871360 01:47:50 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:50 executing program 1: 01:47:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 640.679681] binder: 30752:30771 ioctl c0306201 20000040 returned -22 01:47:50 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}) 01:47:50 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x5000000, 0x0, 0x0}) 01:47:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x5610180000000000, 0x301000) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x2, 0x0, [{0x1, 0x6, 0x6, 0x5, 0x200, 0x6, 0xffffffffffff13fb}, {0x6, 0x6, 0x2, 0x8, 0x10001, 0x3, 0x6}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000040)=""/189, &(0x7f0000000100)=0xbd) 01:47:50 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4207, r0, 0x0, 0xfffffffffffffffd) tkill(r0, 0x8000000a) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) r1 = dup(0xffffffffffffffff) timerfd_gettime(r1, &(0x7f0000000140)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r1}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x9, 0x80000) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000080)=0x31ca) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:50 executing program 1: 01:47:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:50 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}) [ 640.895708] binder: 30800:30801 unknown command 536871360 [ 640.933652] binder: 30800:30801 ioctl c0306201 20000040 returned -22 01:47:50 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 0xf33}}) 01:47:50 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x2, 0xfff) tkill(r0, 0xe) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000080)={0x4, &(0x7f0000000140)=[{}, {}, {}, {}]}) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0xffffffffffffffff, 0x2000, 0x9, 0x2, 0x0, 0xeeb3, 0x1, 0x5, 0x7fffffff}, 0x10) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000003c0)={0x3, 0x2fc, 0x5}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 640.973376] binder: 30800:30816 unknown command 536871360 01:47:50 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]}) [ 641.014167] binder: 30800:30816 ioctl c0306201 20000040 returned -22 01:47:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:51 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x60, 0x0, 0x0}) 01:47:51 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b7020000fe000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe000000008500000026000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xac, 0x0, &(0x7f0000000080)="e61e1c28979b16b8ccc8f2f4615dcf3976f24c77518b2a48f13fdc6e83af65a3375bdd74b7af8c67a6237ed558e430ecdae57543177a0a533fbd293a6633b6399af2eaec1b98ad6ddfaa9c128960696cdf4eb21aa8dbed3167bc64c90e1a2e71739680a509b48344599fdb55ff83e836dad166731225b579a2f10a2c891e3385ca431fbcde4bb6f9c51b551abdf17987d4a8b28c0a1ce98b09c0e0f0b6030ba803eead752d1ef6df4401b426", 0x0, 0x400}, 0x28) 01:47:51 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]}) 01:47:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f00000002c0)=@md5={0x1, "602d64652ccc811e18dee035b762ecb5"}, 0x11, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x6, @ipv4={[], [], @multicast2}, 0x1}}, 0x20, 0x4, 0x2, 0x9, 0x460e5a47}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r3, &(0x7f00000001c0)=0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x500, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:51 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:51 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x80, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000600)=0xe8) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000003c0)="e78d851ba0ffc2cbedfd11267f6d17cd335b412beedbb7ea7cd34a1e49d73cafa7bb3f1b5474d75eac503c50747350f412030d31928f6bd7e82f4581485316af5c83848ff1718bb0420251b8d1629b5d9c5118f36c3312b94af3cad485b35e157c851cc832da69a175bf89e843f3531236041850d8b88806dc19f5e0880e5cd2f47068914fbde838c45bb7bc9c", 0x8d}], 0x1, &(0x7f0000000700)=[@rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x38}, 0x40000) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x9652, 0x60441) ioctl$TUNSETLINK(r5, 0x400454cd, 0x33a) r6 = gettid() lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x100000000, 0x10) tkill(r6, 0x36) wait4(r6, &(0x7f00000007c0), 0x80000007, &(0x7f0000000800)) r7 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x10000, 0x0) getpgid(r6) prctl$PR_GET_KEEPCAPS(0x7) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b4e2ed", @ANYRES16=r8, @ANYBLOB="000029bd7000fddbdf2502000000080003003a000000"], 0x1c}, 0x1, 0x0, 0x0, 0xcfc0b6340b825b99}, 0x20000000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000900)) ptrace$cont(0x18, r6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000008c0)=0x300000, 0x4) io_setup(0x200, &(0x7f00000002c0)) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000780)=@req={0x7, 0x9, 0x1, 0x20}, 0xfffffffffffffe81) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x3, 0x4) ptrace$cont(0x1f, r6, 0x0, 0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r9, 0x8, &(0x7f0000000080)=0x2) [ 641.221188] binder: 30850:30853 unknown command 536871360 [ 641.253905] binder: 30850:30853 ioctl c0306201 20000040 returned -22 01:47:51 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}) 01:47:51 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_udp(0xa, 0x2, 0x0) rt_sigqueueinfo(r0, 0x1e, &(0x7f0000000340)={0x8, 0x1000, 0x9}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000240)=@ethtool_ts_info={0x19}}) wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x800, 0x0) getsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000080), &(0x7f0000000300)=0x4) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0xb, @sliced={0x800, [0x200, 0x1000, 0x4, 0x6, 0x4, 0x9, 0x8, 0x9, 0x7, 0x9, 0x1, 0x4, 0x4, 0x3ed, 0x2, 0x7, 0x660ef780, 0x7, 0x1, 0x401, 0x4, 0x20000000000000, 0x6, 0x8, 0x3, 0x4, 0x6, 0x1, 0x5, 0x6, 0xf56, 0x5, 0x2, 0x4, 0x6cf0, 0x6, 0x3ea, 0x4, 0x3ff, 0x100, 0x8, 0x3, 0x1, 0x6, 0x8, 0x7, 0xffffffffffffffff], 0x80000001}}) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0xfffffffffffffffd, 0x58eb, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000240)=0xfffffffffffffffe) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) memfd_create(&(0x7f00000004c0)='system_u:object_r:crontab_exec_t:s0\x00', 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty, 0x80000}, 0x1c) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca94882000000", 0x200002, 0x0) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x4000000000000) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r4, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000080)=0x9) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, 0x0, 0x0) fadvise64(r4, 0x0, 0x0, 0x7) ioctl$int_out(r1, 0x0, &(0x7f00000002c0)) write(r3, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000400), &(0x7f00000001c0)={0x0, 0x0, 0x10000000}, &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000d80)=ANY=[@ANYBLOB="0000bf75080000000004090000dcbc4649cdac1a37be54833f76511cea4c14084d0766e7176d8f420a560c04b7f66c09370ca86cfbf6bcf502894800c62a7836b4fe00000000000089b563196ac066ca9c571722187c6e713d2427097885f07095c8a6bb0aed501f1540eac9970196c922808a5837a1677ba7020e0dfa12629783d7b6578bbc05b994920486132fe79803000000d7043d9cc46c4a4ce60fa9a065cee9a443e8421d98320206387efd15f48281e449c87b3bba25c8dbceb5d0b6ae5cfd7a63e542340000000b3eaa702b407d26692ab3dbcf4f6e19a353acd3f4d93a1dc8576bc53e92984cc18521f4ec8a701a156380e5e3d1260102b06d0f004275d465c6d341374d468cb23995c603000000aefab42a0b1b8ad004375231253d71bc000000000000009c7a00000000000000e9141d069b4d7b591e95829b4e6112d738c617851ff2ca5d605800ccaf78156f3a570667434885fb01beddfd01bdea651ab98521dbfa383ae093008339a4b5afb0350af4f2ba3cbbfd2e4f181f00000056e7e2258f5d6808910a4106a27e6d2b1e2d39259a612f2f0c5760f3727fe26bfe63d2fa509526ee82be854c896fdd52208acbc220de8576b54514d5243fcb40000000b2be824df3620000000000000000000000000000000000000000749f7efe796302dddae373cbb20938f09e28c5a4dfa479bcf2c2c9ea9b0000000000000000000000000000000000000000000000371d50e5feb3d28e505244ebbeb52a2c3ee408eb0cd6ed836df462c021bce91d3e0db87ed7a8a91150cc4457bab96ce5b5589bbf27f8f15ba157654d84bbffd6755f391b4031eecb9b8e8b604bcafc0e3ee55828e4396c293ce48b50ed1a475d8f6947de22c59641f31b698b4c401f41e79c795ac1717017b2ae8d475f9411fa2ef888c66470781b04ed5e3a00a16cb94ccf3b489dcbcc3be2760f7353bfeccc078876e40ccc1e4e07f3e0ceadacabb40de2accd4f31d6922ed9f5ab3096ad85ba5fa86dc2efaa2800000000000000000000000000cfd4c2e09b6b41814594dc70333d14967043e4c3b39c43706727864972b9e4e1e1b9414f51553f7fbb597ec61fa18710f5f4783897486ebe005b0401001f81c0c622b4b57780b9cb0d4bd225ecd3b459b1ef61c2b6475b7c302bea053ea9000000000000000000db5d0297939a293d545afcd4a9652276033c23b6a8da73dde666fe11f747479dcf60bc2d41ac99a32162bba441d4a004affefb0bb7e37832bcf6196b3a7c3b2b9b57d8a3dab9b7d61538e43f716649d2a4b55834a941a67f18f33c10d680f162019e7b6800000000000000000000000000000092d78e5ebffc1739c2ff2ef18eb47843288f849b4f9942fdf8ff53656edf5b4ac3f29437e8a4868f0327a9d466d15a96d07a0d16ad1c5fb1b5cc"]) listen(r1, 0x20000083) renameat(r3, &(0x7f0000000340)='./bus\x00', 0xffffffffffffffff, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b890", 0x34) [ 641.329595] binder: 30850:30870 unknown command 536871360 [ 641.343283] binder: 30850:30870 ioctl c0306201 20000040 returned -22 01:47:51 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:51 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}) 01:47:51 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x2000000000000000, 0x0, 0x0}) 01:47:51 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) rt_tgsigqueueinfo(r0, r0, 0x1a, &(0x7f0000000040)={0x1, 0x9, 0x80000000}) ptrace$cont(0x20000000018, r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x80080, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xb9, 0x10, 0x4, 0x3}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000200)=r2, 0xffffffffffffffe6) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:51 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 01:47:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000380)={'syz_tun\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}}) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x3f, 0x1, 0xb7f9, 0x3bd9, 0x4f3, 0x6, 0x4, {0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x5, 0x4, 0xaa22, 0x0, 0x721}}, &(0x7f0000000480)=0xb0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000004c0)={r4, 0x6}, &(0x7f0000000500)=0x8) [ 641.581124] binder: 30904:30907 unknown command 536871360 [ 641.601557] binder: 30904:30907 ioctl c0306201 20000040 returned -22 [ 641.610592] kauditd_printk_skb: 2 callbacks suppressed 01:47:51 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 641.610618] audit: type=1804 audit(1544665671.490:72): pid=30916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir267499703/syzkaller.qmMNpV/685/bus" dev="sda1" ino=16961 res=1 [ 641.668260] binder: 30904:30919 unknown command 536871360 [ 641.673834] binder: 30904:30919 ioctl c0306201 20000040 returned -22 01:47:51 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}) 01:47:51 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x7a000000, 0x0, 0x0}) 01:47:51 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x10103, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xe) ptrace$cont(0x18, r1, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.memory_spread_slab\x00', 0x2, 0x0) ptrace$cont(0x1f, r1, 0x0, 0x0) 01:47:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x800, 0x0) accept$unix(r2, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x402000, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000240)=0x4, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) ioctl$KDSETLED(r2, 0x4b32, 0x117) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000180)=""/185) [ 641.862017] binder: 30936:30938 unknown command 536871360 [ 641.878614] binder: 30936:30938 ioctl c0306201 20000040 returned -22 [ 641.901599] binder: 30936:30954 unknown command 536871360 [ 641.915160] binder: 30936:30954 ioctl c0306201 20000040 returned -22 [ 642.226719] audit: type=1804 audit(1544665672.100:73): pid=30923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir267499703/syzkaller.qmMNpV/685/bus" dev="sda1" ino=16961 res=1 01:47:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)="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", 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) fcntl$notify(r1, 0x402, 0x1) close(r0) 01:47:52 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:52 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x48000000, 0x0, 0x0}) 01:47:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x20}) 01:47:52 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 01:47:52 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x1fd, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 642.252821] audit: type=1804 audit(1544665672.100:74): pid=30916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir267499703/syzkaller.qmMNpV/685/bus" dev="sda1" ino=16961 res=1 [ 642.279039] audit: type=1804 audit(1544665672.110:75): pid=30923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir267499703/syzkaller.qmMNpV/685/bus" dev="sda1" ino=16961 res=1 [ 642.360954] binder: 30968:30974 unknown command 536871360 [ 642.384202] binder: 30968:30974 ioctl c0306201 20000040 returned -22 01:47:52 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0x0, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)="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", 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289bce062d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc7ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883feb3dc3cc24bd3c036e396ad3af37945058839e812270bc40901fa654e7cc3292a82fc80c374dc07142a1c2e9d3e2528e4fdac32bcaefe910ebd3b948a3bfebef5fa8d82473c7fbf3ec", 0x0, 0x0) fcntl$notify(r1, 0x402, 0x1) close(r0) 01:47:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000080)={0x8823, 0x8, 0x4, 0x40}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 642.410481] binder: 30968:30986 unknown command 536871360 [ 642.426846] binder: 30968:30986 ioctl c0306201 20000040 returned -22 01:47:52 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x600000000000000, 0x0, 0x0}) 01:47:52 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) 01:47:52 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3ff, 0x4000) write$FUSE_OPEN(r1, &(0x7f00000001c0)={0x20, 0x0, 0x2, {0x0, 0x2}}, 0x20) wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x0, 0x43e, 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x10000000000001c, r0, 0x100, 0x7) io_setup(0x200, &(0x7f00000002c0)) ptrace(0x8, r0) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f00000004c0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) fstat(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() lstat(&(0x7f0000000600)='./file0/../file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f00000006c0)=[0xee00, 0x0, 0xee00, 0x0, 0xee01]) getgroups(0x4, &(0x7f0000000700)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee00]) lstat(&(0x7f0000000740)='./file0/../file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000800)='./file0/../file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f00000008c0)=[0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0xee00]) setxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000900)={{}, {0x1, 0x1}, [{0x2, 0x2, r2}, {0x2, 0x4, r3}, {0x2, 0x6, r4}, {0x2, 0x2, r5}, {0x2, 0x0, r6}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x3, r8}, {0x8, 0x2, r9}, {0x8, 0x2, r10}, {0x8, 0x0, r11}, {0x8, 0x7, r12}, {0x8, 0x4, r13}], {0x10, 0x2}, {0x20, 0x2}}, 0x84, 0x1) r14 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_CONGESTION(r14, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f0000000200)=""/24, &(0x7f0000000240)=0x18) ptrace$cont(0x1f, r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r14, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x4}, @in={0x2, 0x4e23, @remote}], 0x4c) 01:47:52 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0x0, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:52 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x330f000000000000]}) 01:47:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1000000000004) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0a5c2d023c126285718070") sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060000007d5505010c000200000022ff02f10000"], 0x2c}}, 0x0) [ 642.608690] binder: 31002:31007 unknown command 536871360 [ 642.619599] binder: 31002:31007 ioctl c0306201 20000040 returned -22 01:47:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) kcmp(r4, r5, 0x1, r3, r2) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 642.688057] binder: 31002:31021 unknown command 536871360 01:47:52 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setscheduler(r0, 0x7, &(0x7f0000000180)=0x4) io_setup(0x200, &(0x7f00000002c0)) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000140)={0x7, 0x4d, 0x1}, 0x7) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:52 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 01:47:52 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0x0, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 642.728375] binder: 31002:31021 ioctl c0306201 20000040 returned -22 [ 642.740650] netlink: 'syz-executor1': attribute type 1 has an invalid length. 01:47:52 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x74000000, 0x0, 0x0}) 01:47:52 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100003"]], 0x0, 0x0, 0x0}) 01:47:52 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) [ 642.893500] binder: 31049:31056 unknown command 536871360 [ 642.929811] binder: 31049:31056 ioctl c0306201 20000040 returned -22 01:47:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:52 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xcbd2, 0x2) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000080)={0x0, 0x6b, &(0x7f0000000140)="79284fec7928c1fbbfb9d3422f329298671e4136eeceb619c9b71758c94183f65ce3e3e342bcd4e4129a1895ae1b5c3388b08bb103be30aff2ae2c8db60ce8f152108cb2da0f71f7b2886471e41cf2dd761128feaa2c3190366cab059bce1de647359ba34fc5c0dd59562f"}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:47:52 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x0, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 642.979937] binder: 31049:31063 unknown command 536871360 [ 643.012236] binder: 31049:31063 ioctl c0306201 20000040 returned -22 [ 643.044247] binder: 31060:31061 unknown command 536871360 [ 643.059460] binder: 31060:31061 ioctl c0306201 20000040 returned -22 01:47:52 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x6c00, 0x0, 0x0}) 01:47:53 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) [ 643.153228] binder: 31085:31087 unknown command 536871360 [ 643.169272] binder: 31085:31087 ioctl c0306201 20000040 returned -22 01:47:53 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x6c00]}) [ 643.193753] binder: 31085:31090 unknown command 536871360 [ 643.205754] binder: 31085:31090 ioctl c0306201 20000040 returned -22 01:47:53 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x0, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:53 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x1000000, 0x0, 0x0}) 01:47:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7, 0x2000) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x300000000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000001, 0xb77, 0x1, 0x59, 0xc3}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x13, 0x1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYRES16, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], @ANYRES32=r3, @ANYRESHEX=r4], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000003c0)={0xfffffffffffffe01, 0x8, 0x8004, 0xe4, 0x6, 0x8, 0x2, 0x3ff, 0x0}, &(0x7f0000000400)=0x20) write$P9_RUNLINKAT(r2, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000440)={r5, 0xfff, 0x20}, 0xc) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[{}, {}, {}, {}]}) write$selinux_user(r2, &(0x7f0000000540)={'system_u:object_r:agp_device_t:s0', 0x20, 'system_u\x00'}, 0x2b) r6 = getpid() perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0xfffffffffffffff8, 0x1, 0x4, 0x8, 0x0, 0x2, 0x8804, 0x6, 0x7, 0x54a, 0x7, 0xffffffffffffffc1, 0x81, 0x3, 0x6, 0x9, 0x20, 0xff, 0x3, 0x2, 0x20, 0x6, 0x2, 0x401, 0x1, 0x1ff, 0xaf16, 0xfffffffeffffffff, 0x4, 0x79, 0x0, 0x40000, 0x1, 0x4, 0x3f, 0x9, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000480)}, 0x1000, 0x1, 0x6, 0x7, 0x10001, 0xb6, 0x1000}, r6, 0x1, r4, 0xa) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000280)={0x0, 0xfffffffffffffffd}) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000300)={'HL\x00'}, &(0x7f0000000380)=0x1e) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000140)={0x1, 0x1}) socket$inet(0x2, 0x800, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x0) 01:47:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x40000000) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 643.524356] binder: 31101:31106 unknown command 536871360 [ 643.542738] binder: 31101:31106 ioctl c0306201 20000040 returned -22 01:47:53 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x0, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:53 executing program 4: socket$unix(0x1, 0x5, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) socket$tipc(0x1e, 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:53 executing program 1 (fault-call:5 fault-nth:0): setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 643.568212] binder: 31101:31111 unknown command 536871360 [ 643.573779] binder: 31101:31111 ioctl c0306201 20000040 returned -22 [ 643.733838] FAULT_INJECTION: forcing a failure. [ 643.733838] name failslab, interval 1, probability 0, space 0, times 0 [ 643.796308] CPU: 0 PID: 31121 Comm: syz-executor1 Not tainted 4.20.0-rc6+ #151 [ 643.803700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 643.813052] Call Trace: [ 643.815657] dump_stack+0x244/0x39d [ 643.819301] ? dump_stack_print_info.cold.1+0x20/0x20 [ 643.824512] should_fail.cold.4+0xa/0x17 [ 643.828598] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 643.834214] ? zap_class+0x640/0x640 [ 643.837930] ? mark_held_locks+0x130/0x130 [ 643.842179] ? find_held_lock+0x36/0x1c0 [ 643.846261] ? perf_trace_sched_process_exec+0x860/0x860 [ 643.851727] __should_failslab+0x124/0x180 [ 643.855988] should_failslab+0x9/0x14 [ 643.859808] kmem_cache_alloc_trace+0x2d7/0x750 [ 643.864476] ? _raw_spin_unlock+0x2c/0x50 [ 643.868629] binder_get_thread+0x255/0x880 [ 643.872883] ? binder_new_node+0x8d0/0x8d0 [ 643.877123] ? perf_trace_sched_process_exec+0x860/0x860 [ 643.882577] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 643.888132] ? rcu_pm_notify+0xc0/0xc0 [ 643.892023] ? __might_sleep+0x95/0x190 [ 643.896001] ? binder_ioctl_write_read.isra.42+0xba0/0xba0 [ 643.901634] binder_ioctl+0x275/0x194a [ 643.905548] ? binder_ioctl_write_read.isra.42+0xba0/0xba0 [ 643.911200] ? avc_has_extended_perms+0xab2/0x15a0 [ 643.916265] ? avc_ss_reset+0x190/0x190 [ 643.920243] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 643.925003] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 643.929588] ? retint_kernel+0x2d/0x2d [ 643.933477] ? trace_hardirqs_on_caller+0xc0/0x310 [ 643.938425] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 643.943178] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 643.948639] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 643.953493] ? perf_trace_sched_process_exec+0x860/0x860 [ 643.958970] ? retint_kernel+0x2d/0x2d [ 643.962893] ? binder_ioctl_write_read.isra.42+0xba0/0xba0 [ 643.968525] do_vfs_ioctl+0x1de/0x1790 [ 643.972426] ? ioctl_preallocate+0x300/0x300 [ 643.976847] ? selinux_file_mprotect+0x620/0x620 [ 643.981629] ? __sb_end_write+0xd9/0x110 [ 643.985717] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 643.991255] ? fput+0x130/0x1a0 [ 643.994545] ? do_syscall_64+0x9a/0x820 [ 643.998544] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 644.004086] ? security_file_ioctl+0x94/0xc0 [ 644.008534] ksys_ioctl+0xa9/0xd0 [ 644.012008] __x64_sys_ioctl+0x73/0xb0 [ 644.015903] do_syscall_64+0x1b9/0x820 [ 644.019787] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 644.025183] ? syscall_return_slowpath+0x5e0/0x5e0 [ 644.030213] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 644.035061] ? trace_hardirqs_on_caller+0x310/0x310 [ 644.040079] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 644.045131] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 644.050686] ? prepare_exit_to_usermode+0x291/0x3b0 [ 644.055709] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 644.060562] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 644.065754] RIP: 0033:0x457679 [ 644.068967] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 644.087875] RSP: 002b:00007f09a9009c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 644.095599] RAX: ffffffffffffffda RBX: 00007f09a9009c90 RCX: 0000000000457679 [ 644.102863] RDX: 0000000020000040 RSI: 00000000c0306201 RDI: 0000000000000005 [ 644.110134] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 644.117400] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09a900a6d4 [ 644.124664] R13: 00000000004beaef R14: 00000000004cf6f8 R15: 0000000000000006 [ 644.151563] binder: 31118:31121 ioctl c0306201 20000040 returned -12 [ 644.527044] device bridge_slave_1 left promiscuous mode [ 644.532683] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.586425] device bridge_slave_0 left promiscuous mode [ 644.592020] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.682585] team0 (unregistering): Port device team_slave_1 removed [ 644.696917] team0 (unregistering): Port device team_slave_0 removed [ 644.711381] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 644.771168] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 644.865162] bond0 (unregistering): Released all slaves 01:47:55 executing program 0: r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000040)="ad776c616e3065746830706f7369785f61636c5f61636365737300"}, 0x30) wait4(r1, &(0x7f0000000140), 0x1, &(0x7f0000000180)) 01:47:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x286c0, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x9, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) io_setup(0x100000001, &(0x7f0000000080)=0x0) io_submit(r4, 0x0, &(0x7f00000000c0)) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:47:55 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x2000, 0x0, 0x0}) 01:47:55 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x0, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:47:55 executing program 1 (fault-call:5 fault-nth:1): setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:55 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]}) 01:47:56 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x0, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 646.160438] binder: 31136:31139 unknown command 536871360 [ 646.176526] binder: 31131:31133 unknown command 536871360 [ 646.188141] binder: 31131:31133 ioctl c0306201 20000040 returned -22 [ 646.201317] binder: 31136:31139 ioctl c0306201 20000040 returned -22 [ 646.232677] binder: 31131:31148 unknown command 536871360 01:47:56 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:56 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xfff, 0x0, 0x0, 0xffffffffffffffff}) ftruncate(r1, 0x5) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 646.277539] binder: 31131:31148 ioctl c0306201 20000040 returned -22 01:47:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$RTC_PIE_OFF(r2, 0x7006) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0x8d00000000000000, 0x80f004, 0x1, 0x9, 0x20}) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000080)=0x2) 01:47:56 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x7a00000000000000, 0x0, 0x0}) 01:47:56 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x0, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 646.371793] binder: 31154:31155 unknown command 536871360 [ 646.425884] binder: 31154:31155 ioctl c0306201 20000040 returned -22 [ 646.465140] IPVS: ftp: loaded support on port[0] = 21 01:47:56 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5460, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:56 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x0, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 646.490394] binder: 31167:31171 unknown command 536871360 [ 646.514476] binder: 31167:31171 ioctl c0306201 20000040 returned -22 [ 646.557283] binder: 31167:31174 unknown command 536871360 [ 646.583275] binder: 31167:31174 ioctl c0306201 20000040 returned -22 01:47:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x4) 01:47:56 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc020660b, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:47:56 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x4c00, 0x0, 0x0}) [ 646.763601] binder: 31189:31192 unknown command 536871360 [ 646.785014] binder: 31189:31192 ioctl c0306201 20000040 returned -22 [ 646.838099] binder: 31189:31199 unknown command 536871360 [ 646.875483] binder: 31189:31199 ioctl c0306201 20000040 returned -22 [ 647.544048] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.550995] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.559278] device bridge_slave_0 entered promiscuous mode [ 647.601567] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.608364] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.616087] device bridge_slave_1 entered promiscuous mode [ 647.655883] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 647.696460] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 647.819334] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 647.864464] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 648.056355] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 648.063753] team0: Port device team_slave_0 added [ 648.102449] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 648.109790] team0: Port device team_slave_1 added [ 648.149558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 648.194158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 648.237365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 648.282366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 648.712714] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.719133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.725820] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.732188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.740193] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 649.395821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 649.924611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.012490] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 650.097041] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 650.103148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 650.110790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 650.193932] 8021q: adding VLAN 0 to HW filter on device team0 01:48:00 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]}) 01:48:00 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x0, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:00 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4b49, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:00 executing program 4: r0 = socket(0x1, 0xa, 0xad8f) sendmsg$rds(r0, &(0x7f0000001380)={&(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/121, 0x79}, {&(0x7f0000000140)=""/101, 0x65}, {&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f0000000240)=""/134, 0x86}], 0x4, &(0x7f0000001140)=[@rdma_args={0x48, 0x114, 0x1, {{0x1, 0x2}, {&(0x7f0000000340)=""/192, 0xc0}, &(0x7f00000008c0)=[{&(0x7f0000000400)=""/196, 0xc4}, {&(0x7f0000000500)=""/92, 0x5c}, {&(0x7f0000000580)=""/26, 0x1a}, {&(0x7f00000005c0)=""/144, 0x90}, {&(0x7f0000000680)=""/81, 0x51}, {&(0x7f0000000700)=""/40, 0x28}, {&(0x7f0000000740)=""/51, 0x33}, {&(0x7f0000000780)=""/210, 0xd2}, {&(0x7f0000000880)=""/16, 0x10}], 0x9, 0x1, 0x79}}, @rdma_dest={0x18, 0x114, 0x2, {0x40, 0x100000000}}, @rdma_dest={0x18, 0x114, 0x2, {0x80, 0xffffffff}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000980)=""/20, 0x14}, &(0x7f00000009c0), 0xc}}, @mask_fadd={0x58, 0x114, 0x8, {{0xffffffffffffffff, 0x80000000}, &(0x7f0000000a00)=0x10001, &(0x7f0000000a40)=0x8e, 0x10000, 0x2, 0x1, 0xc3e1, 0x8}}, @fadd={0x58, 0x114, 0x6, {{0x4, 0x5}, &(0x7f0000000a80)=0x10001, &(0x7f0000000ac0)=0x6, 0x5, 0x8001, 0x2, 0x0, 0x50, 0x2}}, @cswp={0x58, 0x114, 0x7, {{0x7fff}, &(0x7f0000000b00)=0x3, &(0x7f0000000b40)=0x7f, 0xcb5, 0x80000000, 0x401, 0x0, 0x10, 0x4}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000b80)=""/79, 0x4f}, &(0x7f0000000c00), 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0x9}, {&(0x7f0000000c40)=""/81, 0x51}, &(0x7f00000010c0)=[{&(0x7f0000000cc0)=""/255, 0xff}, {&(0x7f0000000dc0)=""/67, 0x43}, {&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/107, 0x6b}, {&(0x7f0000000f40)=""/40, 0x28}, {&(0x7f0000000f80)=""/9, 0x9}, {&(0x7f0000000fc0)=""/35, 0x23}, {&(0x7f0000001000)=""/129, 0x81}], 0x8, 0x3b, 0x8}}], 0x228, 0x4}, 0x40800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x20}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:48:00 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x4800000000000000, 0x0, 0x0}) 01:48:00 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$getregs(0xe, r0, 0x6, &(0x7f0000000140)=""/134) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:48:00 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x0, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 650.786228] binder: 31462:31475 ioctl 4b49 20000040 returned -22 [ 650.806440] binder: 31464:31473 unknown command 536871360 [ 650.825249] binder: 31464:31473 ioctl c0306201 20000040 returned -22 01:48:00 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4020940d, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000040)=0x9, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'vcan0\x00', 0x801}) [ 650.842057] binder: 31464:31485 unknown command 536871360 [ 650.875615] binder: 31464:31485 ioctl c0306201 20000040 returned -22 01:48:00 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7fff, 0x2) setsockopt$sock_int(r1, 0x1, 0x1e, &(0x7f0000000080)=0x3ff, 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000140)={'lo\x00', 0xffff}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:48:00 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}) 01:48:00 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x4c00000000000000, 0x0, 0x0}) 01:48:00 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x0, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 651.001992] audit: type=1400 audit(1544665680.870:76): avc: denied { setopt } for pid=31496 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 01:48:00 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 651.057618] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:48:01 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}) 01:48:01 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x0, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 651.107265] binder: 31507:31515 unknown command 536871360 [ 651.128768] binder: 31507:31515 ioctl c0306201 20000040 returned -22 01:48:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:48:01 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0xffffffffffffffff) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x800, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000001c0)={0x0, @reserved}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r5 = memfd_create(&(0x7f0000000140)='security.im!\x00', 0x0) write$eventfd(r5, &(0x7f0000000100)=0xa, 0x2) sendfile(r5, r5, &(0x7f0000000480), 0xffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r5, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000040)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 651.194981] binder: 31507:31528 unknown command 536871360 01:48:01 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0189436, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:01 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}) [ 651.250521] binder: 31507:31528 ioctl c0306201 20000040 returned -22 01:48:01 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x0, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:01 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x20000000, 0x0, 0x0}) 01:48:01 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}) [ 651.383203] audit: type=1400 audit(1544665681.250:77): avc: denied { map } for pid=31544 comm="syz-executor0" path=2F6D656D66643A73656375726974792E696D21202864656C6574656429 dev="tmpfs" ino=168148 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 01:48:01 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x0, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:01 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x541b, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400000, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000080)={0x100000001, 0x100000001, 0x8}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 651.522387] binder: 31570:31572 unknown command 536871360 [ 651.554670] binder: 31570:31572 ioctl c0306201 20000040 returned -22 01:48:01 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x330f]}) [ 651.599590] binder: 31583:31584 ioctl 541b 20000040 returned -22 [ 651.637033] binder: 31570:31588 unknown command 536871360 01:48:01 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 01:48:01 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x0, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 651.661641] binder: 31570:31588 ioctl c0306201 20000040 returned -22 01:48:04 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x200000, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:48:04 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306248, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:04 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x7a00, 0x0, 0x0}) 01:48:04 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000002c0)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6, @in6=@local, 0x4e24, 0x3f, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0xbb, r1, r2}, {0x100000001, 0x2, 0x3f, 0x20, 0x5, 0x5, 0x3, 0x1}, {0x2, 0x8, 0x1ff, 0x8597}, 0x4, 0x6e6bb8, 0x0, 0x1, 0x2, 0x2}, {{@in6, 0x4d4, 0x6c}, 0xa, @in=@multicast1, 0x3507, 0x4, 0x3, 0xb3, 0x5, 0x80000000, 0xfffffffffffffffe}}, 0xe8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fcntl$getflags(r3, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:48:04 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x0, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:04 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 01:48:04 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) [ 654.520558] binder: 31619:31630 ioctl c0306248 20000040 returned -22 [ 654.530548] binder: 31621:31628 unknown command 536871360 [ 654.542780] binder: 31621:31628 ioctl c0306201 20000040 returned -22 01:48:04 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) ptrace$setregset(0x4205, r0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)="55ecef2554859a53044827201aaffb09d5f9c50257aa", 0x16}) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0xfffffffffffffd82, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xe) ptrace$cont(0x18, r1, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) r2 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x1f, 0x840) openat$cgroup_subtree(r2, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x1ff, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000000)={0x0, 0x3, 0x101, 0x0, 0x3ff}) [ 654.565771] binder: 31621:31640 unknown command 536871360 [ 654.574775] binder: 31621:31640 ioctl c0306201 20000040 returned -22 01:48:04 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x0, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:04 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x300, 0x0, 0x0}) 01:48:04 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 01:48:04 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5452, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:48:04 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0xaa, 0x80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x0, @mcast2, 0x1}}, 0x7, 0x8, 0x532e, 0x1, 0x8}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={0x0, 0xffff}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000003c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r1, 0x7f}, &(0x7f0000000300)=0xfffffffffffffe1f) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000340)={r2, 0x2}, 0x8) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0xe) ptrace$cont(0x18, r3, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) gettid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r3, 0x0, 0x0) [ 654.763048] binder: 31658:31663 unknown command 536871360 01:48:04 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x0, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 654.815063] binder: 31658:31663 ioctl c0306201 20000040 returned -22 [ 654.854122] binder: 31658:31676 unknown command 536871360 01:48:04 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5451, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 654.866055] binder: 31658:31676 ioctl c0306201 20000040 returned -22 01:48:04 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}) 01:48:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:48:04 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x600, 0x0, 0x0}) 01:48:04 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xe) ptrace$cont(0x18, r1, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 01:48:04 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x0, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:04 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40087602, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:05 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x0, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 655.126675] binder: 31704:31707 unknown command 536871360 01:48:05 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 01:48:05 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x80, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f00000001c0)={0x3, 0x0, 0x3017, 0xf72, 0x9, {0x20, 0x800}}) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x80800) fcntl$getownex(r2, 0x10, &(0x7f0000000140)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 655.166956] binder: 31704:31707 ioctl c0306201 20000040 returned -22 [ 655.201470] binder: 31704:31719 unknown command 536871360 01:48:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) personality(0x410000b) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 655.258738] binder: 31704:31719 ioctl c0306201 20000040 returned -22 01:48:05 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x80087601, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:05 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) 01:48:05 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x2, 0x0, 0x0}) 01:48:05 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x0, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:05 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) bind$nfc_llcp(r1, &(0x7f0000000140)={0x27, 0x0, 0x0, 0x2, 0x84, 0x4, "15538d05fb1bb505785edc92da367c8d3b906e53c4d7fd111f214bd395ad89481c1f2ec098bd126bd810c8ced2b04d677092e05587e6347d92cde31d18d4e7", 0x29}, 0x60) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$cont(0x23, r0, 0x9, 0x0) 01:48:05 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]}) [ 655.455151] binder: 31749:31754 ioctl 80087601 20000040 returned -22 [ 655.473967] binder: 31744:31760 unknown command 536871360 01:48:05 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40049409, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:05 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x0, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 655.513652] binder: 31744:31760 ioctl c0306201 20000040 returned -22 [ 655.542042] binder: 31744:31764 unknown command 536871360 [ 655.575627] binder: 31744:31764 ioctl c0306201 20000040 returned -22 01:48:05 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x60000000, 0x0, 0x0}) 01:48:05 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]}) 01:48:05 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x0, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:05 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 655.730443] binder: 31793:31794 unknown command 536871360 01:48:05 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="d54f04ff00e355743a9eed97731f639e5c4181779f7ee7cb510f3b6466c35bd12978e5e2c087f7a4868a53a24b33d6e39c4bbd42d7791b3f754a29b08ad7e50588c5b43b5e5f2a565d36963b0e5a931273a52fc144ad0467923cb3e466a58587593287c36156d1d818ec74c79c9102efd8a5e8f3395dc0d4a8dee470762cae97a18b2cc9237d6cca85a1ae20c01ecf4eb03d72201c6f99d359dc80d709f78d31f8ed76ab80151beeb37848a61e94c70c1c7dd2b3dce86cf207a40b2a3034bdc26ce787579121f89332a1812b84f4383a42361a2be44359a4bcdcd418ba3db3a1da0eef984bc31b4af2d314df95e2c141a3287e81f86e6350ca", 0xf9, 0xfffffffffffffff8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() keyctl$chown(0x4, r1, r2, r3) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:48:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) r3 = fcntl$getown(r1, 0x9) rt_tgsigqueueinfo(r2, r3, 0x2d, &(0x7f00000000c0)={0xc, 0x1, 0x8b0}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 655.774195] binder: 31793:31794 ioctl c0306201 20000040 returned -22 [ 655.850958] binder: 31793:31808 unknown command 536871360 [ 655.879044] binder: 31793:31808 ioctl c0306201 20000040 returned -22 01:48:05 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x0, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:05 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:05 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}) 01:48:05 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x6c000000, 0x0, 0x0}) 01:48:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200)) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x1, 0xcb34, 0x1f, 0x5}, 0x6) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x141000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000340)={0x30, 0x5, 0x0, {0x0, 0x6, 0x0, 0xf6}}, 0x30) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0xc80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) rt_sigaction(0x11, &(0x7f00000000c0)={&(0x7f0000000040)="fe4cdd65c46201a9e1c4a251b901c402d59e16c4219016c0c4a2a1b7e58f2870a2458c00430ff8ea6666460f3a0855cb0a6645de07", {0x8001}, 0x5, &(0x7f0000000080)="66410f38243ac402fd34dac441e05e8b0a000000c423714aca46c4c12055e0c4429939cbc421f95b1667410f34f3400f1aa38397ad92470f5b4ffe"}, &(0x7f0000000180)={&(0x7f0000000100)="c4817d74598bc44195e03bc4223d8c4d348f6878850001c46115c2876f0000005f42f7a900000000c463791db814ec7ddb09c401f82828660fd9cb660fd418", {}, 0x0, &(0x7f0000000140)="660ff67a00420f0047e9660f3a42ce6cc421b1fbcc65460db7c5000026f5c482614648fbf042835d104c8f8978d2d880bfe5dde31302"}, 0x8, &(0x7f00000001c0)) 01:48:05 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xe) ptrace$cont(0x18, r2, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) 01:48:06 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x0, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:06 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 656.086417] binder: 31831:31836 unknown command 536871360 [ 656.121520] binder: 31831:31836 ioctl c0306201 20000040 returned -22 01:48:06 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 01:48:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000002800)='/dev/bus/usb/00#/00#\x00', 0x2, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000002840)) sendto$llc(r1, &(0x7f0000002880)="a8f37b2715e16f5b595dea6dc16b19516e177ea1b64d6675f14cef7bcc271d8f3a587f475e81c92d92ddeb1c7d730b88554d0fe1d3b27bc92d", 0x39, 0x4, &(0x7f00000028c0)={0x1a, 0x303, 0x9, 0xfffffffffffffffb, 0x889, 0x7fff, @dev={[], 0x1f}}, 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r4, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f00000002c0)=""/194, 0xc2}], 0x3, &(0x7f00000003c0)=""/188, 0xbc}, 0x1}, {{&(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000500)=""/181, 0xb5}, {&(0x7f00000005c0)=""/189, 0xbd}, {&(0x7f0000000680)=""/157, 0x9d}, {&(0x7f0000000740)=""/160, 0xa0}], 0x4, &(0x7f0000000800)=""/63, 0x3f}, 0x1}, {{&(0x7f0000000840)=@ax25, 0x80, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/87, 0x57}, {&(0x7f0000000940)=""/188, 0xbc}], 0x2}, 0x8000}, {{&(0x7f0000000a40)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000ac0)=""/198, 0xc6}, {&(0x7f0000000bc0)=""/89, 0x59}, {&(0x7f0000000c40)=""/20, 0x14}, {&(0x7f0000000c80)=""/242, 0xf2}, {&(0x7f0000000d80)=""/108, 0x6c}, {&(0x7f0000000e00)=""/204, 0xcc}], 0x6, &(0x7f0000000f80)=""/155, 0x9b}, 0x80000000}, {{&(0x7f0000001040)=@ax25, 0x80, &(0x7f00000022c0)=[{&(0x7f00000010c0)=""/100, 0x64}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/173, 0xad}, {&(0x7f0000002200)=""/11, 0xb}, {&(0x7f0000002240)=""/96, 0x60}], 0x5, &(0x7f0000002340)=""/244, 0xf4}, 0x6}, {{&(0x7f0000002440)=@alg, 0x80, &(0x7f00000025c0)=[{&(0x7f00000024c0)=""/246, 0xf6}], 0x1, &(0x7f0000002600)=""/23, 0x17}, 0xffffffffffffffc0}], 0x6, 0x0, &(0x7f00000027c0)={0x77359400}) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 656.171813] binder: 31831:31852 unknown command 536871360 [ 656.201618] binder: 31831:31852 ioctl c0306201 20000040 returned -22 01:48:06 executing program 0: clone(0x100228bd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 656.249968] binder: 31855 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 656.250041] binder: 31855:31858 ioctl c018620c 20000040 returned -22 01:48:06 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x4c000000, 0x0, 0x0}) 01:48:06 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 01:48:06 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x0, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:06 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x2, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:06 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}) [ 656.398810] binder: 31873:31878 unknown command 536871360 [ 656.433267] binder: 31873:31878 ioctl c0306201 20000040 returned -22 01:48:06 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x0, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 656.498576] binder: 31873:31896 unknown command 536871360 [ 656.513491] binder: 31873:31896 ioctl c0306201 20000040 returned -22 01:48:06 executing program 4: r0 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r1, 0x7, 0x2, [0x6, 0x9]}, &(0x7f00000001c0)=0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:48:06 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) 01:48:06 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x4800, 0x0, 0x0}) 01:48:06 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x0, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:06 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x10, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:06 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) [ 656.678209] binder: 31911:31912 unknown command 536871360 [ 656.693728] binder: 31911:31912 ioctl c0306201 20000040 returned -22 01:48:06 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) timerfd_gettime(r0, &(0x7f0000000040)) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xe) ptrace$cont(0x18, r1, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) prctl$PR_GET_SECCOMP(0x15) ptrace$cont(0x1f, r1, 0x0, 0x0) [ 656.721177] binder: 31911:31923 unknown command 536871360 01:48:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x3, 0x213, 0x1ff, 0x3, 0x42a2}, 0x14) getsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 656.768771] binder: 31911:31923 ioctl c0306201 20000040 returned -22 [ 656.802866] binder: 31926:31931 ioctl 10 20000040 returned -22 01:48:06 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) 01:48:06 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x0, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:06 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x700000000000000, 0x0, 0x0}) 01:48:06 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:06 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]}) 01:48:06 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x0, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 657.046246] binder: 31963:31967 unknown command 536871360 [ 657.070963] binder: 31963:31967 ioctl c0306201 20000040 returned -22 01:48:06 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:06 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf33]}) 01:48:07 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x200400, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 657.097920] binder: 31963:31973 unknown command 536871360 [ 657.103551] binder: 31963:31973 ioctl c0306201 20000040 returned -22 01:48:07 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x0, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:09 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x440000008, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000200)={'dummy0\x00', 0x200}) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x8001, 0x10000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000080)={0x100000001, 0x10001, 0x0, 0x1f, 0x7fff, 0x8, 0x9, 0x10000, 0x0}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000180)={r3, 0x81, 0x8000}, 0x8) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:48:09 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x68000000, 0x0, 0x0}) 01:48:09 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306202, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:09 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 01:48:09 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x0, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000080)={0x80000001, 0x1}) [ 659.979872] binder: 32004:32009 unknown command 536871360 [ 659.983654] binder: 32005:32012 ioctl c0306202 20000040 returned -22 [ 660.001490] binder: 32004:32009 ioctl c0306201 20000040 returned -22 01:48:09 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x0, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:09 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 01:48:09 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc030623d, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xfffffffffffffffd, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x4}}, 0x30) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000040)) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x16}) [ 660.047170] binder: 32004:32024 unknown command 536871360 [ 660.070672] binder: 32004:32024 ioctl c0306201 20000040 returned -22 01:48:10 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x8) 01:48:10 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x7000000, 0x0, 0x0}) 01:48:10 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x0, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 660.194399] binder: 32029:32034 ioctl c030623d 20000040 returned -22 01:48:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000080)) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:48:10 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 01:48:10 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x100000000000002, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) 01:48:10 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306225, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 660.279339] binder: 32046:32048 unknown command 536871360 [ 660.315709] binder: 32046:32048 ioctl c0306201 20000040 returned -22 01:48:10 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2400, 0x0) fcntl$setlease(r1, 0x400, 0x1) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:48:10 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x0, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 660.378321] binder: 32046:32064 unknown command 536871360 [ 660.383918] binder: 32046:32064 ioctl c0306201 20000040 returned -22 01:48:10 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) [ 660.469364] binder: 32067:32073 ioctl c0306225 20000040 returned -22 01:48:10 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x3000000, 0x0, 0x0}) 01:48:10 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x5) 01:48:10 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x0, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:10 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4b47, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 660.669023] binder: 32092:32094 unknown command 536871360 [ 660.698053] binder: 32092:32094 ioctl c0306201 20000040 returned -22 [ 660.709488] binder: 32097:32099 ioctl 4b47 20000040 returned -22 01:48:10 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x0, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x70ae2013fdc8c351, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 660.734624] binder: 32092:32103 unknown command 536871360 [ 660.767796] binder: 32092:32103 ioctl c0306201 20000040 returned -22 01:48:10 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x80086601, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:10 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x6000000000000000, 0x0, 0x0}) 01:48:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r3, &(0x7f0000000040)="b289292cdf7d617cbd6bf85b4a7e6d84ae05073c4d37884aca705bbe5bc1", 0x1e, 0x24000040, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x4, 0x0, 0x4, {0xa, 0x4e23, 0x5, @empty, 0x401}}}, 0x80) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 660.918537] binder: 32110:32114 ioctl 80086601 20000040 returned -22 [ 660.932712] binder: 32112:32116 unknown command 536871360 [ 660.977175] binder: 32112:32116 ioctl c0306201 20000040 returned -22 [ 661.020072] binder: 32112:32122 unknown command 536871360 [ 661.038997] binder: 32112:32122 ioctl c0306201 20000040 returned -22 [ 661.716274] device bridge_slave_1 left promiscuous mode [ 661.721848] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.776493] device bridge_slave_0 left promiscuous mode [ 661.782057] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.869729] team0 (unregistering): Port device team_slave_1 removed [ 661.882210] team0 (unregistering): Port device team_slave_0 removed [ 661.895338] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 661.961076] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 662.054158] bond0 (unregistering): Released all slaves 01:48:13 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x3) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0xffffffffbfffffff) 01:48:13 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x0, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:13 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0046209, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:13 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x7, 0x0, 0x0}) 01:48:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = accept4$tipc(0xffffffffffffff9c, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x800) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) getpgrp(r2) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0)=0x80, 0x4) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:48:13 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x330f0000]}) [ 663.611180] binder: 32131:32136 unknown command 536871360 [ 663.642840] binder: 32131:32136 ioctl c0306201 20000040 returned -22 01:48:13 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:13 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x0, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x4, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x6, 0x40000) ioctl$TCXONC(r3, 0x540a, 0x81) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x5000, 0xffe, 0x0, 0x20}) ioctl$TCGETS(r3, 0x5401, &(0x7f00000000c0)) 01:48:13 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0x80000000000000f, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000080)={0x100000001, 0x8, 0x800, 0x4, 0xffffffff00000001}) [ 663.683192] binder: 32131:32146 unknown command 536871360 [ 663.717707] binder: 32131:32146 ioctl c0306201 20000040 returned -22 01:48:13 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x200000000000000, 0x0, 0x0}) 01:48:13 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x0, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:13 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x8, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 663.890367] IPVS: ftp: loaded support on port[0] = 21 01:48:13 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5450, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 663.970585] binder: 32164:32167 unknown command 536871360 [ 663.987478] binder: 32164:32167 ioctl c0306201 20000040 returned -22 01:48:13 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x0, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 664.018194] binder: 32164:32178 unknown command 536871360 [ 664.033481] binder: 32164:32178 ioctl c0306201 20000040 returned -22 01:48:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 01:48:13 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x300000000000000, 0x0, 0x0}) [ 664.167274] binder: 32190:32194 unknown command 536871360 [ 664.206156] binder: 32190:32194 ioctl c0306201 20000040 returned -22 [ 664.271193] binder: 32190:32200 unknown command 536871360 [ 664.286529] binder: 32190:32200 ioctl c0306201 20000040 returned -22 [ 664.635352] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.642031] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.649167] device bridge_slave_0 entered promiscuous mode [ 664.675591] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.681979] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.689535] device bridge_slave_1 entered promiscuous mode [ 664.716129] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 664.742623] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 664.816946] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 664.846779] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 664.963641] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 664.970751] team0: Port device team_slave_0 added [ 664.996700] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 665.003771] team0: Port device team_slave_1 added [ 665.030133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 665.056558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 665.084213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 665.111803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 665.359172] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.365584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.372149] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.378572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.267416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.352655] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 666.441034] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 666.447386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 666.454301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 666.539813] 8021q: adding VLAN 0 to HW filter on device team0 01:48:16 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}) 01:48:16 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) sched_getscheduler(r0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) syz_mount_image$minix(&(0x7f00000003c0)='minix\x00', &(0x7f0000000400)='./file0\x00', 0xfff, 0x9, &(0x7f0000002800)=[{&(0x7f0000000440)="fa3353125de7e02f6b959d81463fc33942c794c78570ccac0547fae341cd8c03f324205c0caa3373257fcd2b57725687c0517dc10727247ca05d013e8cb7c60c7fe520ff7bcc5d525a7b7dce9af420de3f3dcee42d458ac9ef222e6cbcae1c9c0c6cfa384e26be0e7259fc0eb3066e5012b52e9d98e70c454abd321fc4363cb9e8c31dc7b848ac917df35a81ba8df668c2793dab", 0x94, 0x8}, {&(0x7f0000000500)="6fb0bd37d876c20a0f6253d6ef2d80fb0d8ff334dd30c705c50be588e6d468f02d004c68412f", 0x26, 0x3}, {&(0x7f0000000540)="80a4", 0x2}, {&(0x7f0000000580)="1de56375ab8180e350ce7e2183ee3fa598e95acafd2e4d057fb1e5ed178009e6b97cf1146cf2866b3c029208bb6fa184bf09bf17829bef2c5a6caf6d111513b0ba6caeb9acae28a4127d759ceadda1c6c3d609a268e23239cdb38ee17063232f8a4a2a0fc8c802bab2570cc41bb3d48eb98136ad81d07e465b50c1e97e0e007b351cf0210e7510a087d15a12a5df315b6276095aa61679a47b6327a6410e8146f36f6b042143ecf73775", 0xaa, 0x5}, {&(0x7f0000000640)="b67303dbce665f833f87e6bfc1beb3a391b1e8ea2568d493b02cb59816c682d3ddd407ff137281444d9444137d73bbc1beeba87f8d46eef0d41501185ed67ade64ac96cbbdd0e1ab044fc3a9e54fd37a4dfbfcf7f59ff6b5082b631b52bf129b83bdfa1f49b47cb5b8f75d5a085924f7b11b7bf91cfd0a2c76d2c2f1b3f55aae1969c8e32a01bc2b13360c2504e6380856b1397b0e8b2617955f4c32d0ac78eeaa6bf607e71a3733cf30d8481cce4b9d9a658f7dcda96fc48833dd15bc164715d776f6797a478211c1af72807bb7c62e7d3190f43be7", 0xd6, 0x1ff}, {&(0x7f0000000740)="cf477ad7013ee0a53e081899d6df21f9ef29fb7a27521bc19f5fa4f4334401a566507b163895686cc463cc649d105fbaab98bd9b", 0x34, 0x10000}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="661ec340dafedfac6fc4b8f62a38639e15615fa5b3f8c4f928a4de8d98e9c28f96cea1010804fcfd457dc548f2ded72275c719b1b3e76be2812d3f75b41bc75c3b11ca4133bb8d048e2587e34b13cd72", 0x50}, {&(0x7f0000001800)="f68c1af8f9c72bed557d3d78cb817895bf77630ada629ab5e33951145874d4c2267ffdddf14f8f163be69502bf932dc39c90b24ca86ee2c2fb32cb88d61a767ef599243a296387be13651f75addda6113d1c4d1c8462109dbd1f08128f36599e92d5ca8feb35ed9d61277ff60b3adc61fd98e8a3a842fa57ec694357c6abc945278e103ecdd1a235b64f4fba09ba577f1709a34766e1c29543d7052e3001fdecfdc35bd1942def17e30c5e677798676dac4b13548965d1986f7521056c27d77c259d429b1b915427c7df4629b8d872d1248b11702dfe7ccabe26e83b92f3da467a832ce9a1f5afea4f5caa251067cdfed9b8fe5f62cc442026c912e02c6cb351404d01a857ef61be03d6089b86cabe027fca90b258c6494becde2333ef65ff3b0a29e511720d5029b046cb14ae27d665fc3cc41c1eebfa0b71789d63f70fe94eba15aeb55aea42de38eacacf32e52f666ec8f4fa67d4ad46f455f2dbed32843dbbad93b7c05387c1c6efbefeac3f8808f00910623cb4f1c7be99cbf715a01ceb4d27827c82409e166458c39974f6c87530de802238e1f5116cf689ef3d861f899b2608e2d13735f6df1318a8b68561b628569222320d07f2beb61ec79b332f546ad7fc6a9f2fff27a8a32a2b696f2cea77a8b98d2dbe07442c3164acccbb5478411ac9a66c121a54c8ad5dc0720923bbbb903b90e5958e57d294f0915b3e3a9ac6e1dbfdd710149486458d52ba2a4c5fc10505f7d2905200d36435ad4e7f8fb72b24a91e4a4288d9e2bb80253bf361fd8188ef2e0450e4729e77607cc79693b8e62a7b39d03ab357478342df96b29deddcdf9c92016eb7b57b36048be3f14d26f289c0edc293c103c332cebd5c66c843b51fb76e195a096bfb170316728102ae87eee701b2cccb2cae549b8b8a4263b87cff742aeb65039a482fe099b3ea75bd0e5418aa86bfa008778c6c37cde3975ca5e8428c45e1d5f316e726a8de0f23f38bf2e67e5720ab681a3dac2a0177942cec527aa4ac9987eb90ecfaf1d632b5547888e7875ecff3bd937cec6e66233a6c81e46130882fa75e2bcddb8ec270f6207f1762d0bdd4ac716430fb6729c2abe7e6d9356462a9a88409a84bf97a91a671fd04a1218927b71ae0198ded86c050b4433c94d61cc70d47ffcaf71218163adb80ae719023b33b33cf499c70e395946c70e58add06145ada2159636f4b4904de3bde87f481632cbb8b83d18b55a1f4ccf1833b19b40cdfaee2e765bd225ba2d26d9a312a7c6984b9b2c62cb23e49e6ffea4b0a05edadd73ca44bb7929b74901ecd2ab4ce152d433b8513fe137ee351e485024f807e3305955e696759695121530939a003e0cda39be2d4e6d3e8661714fd9c55223248e86a01e635c2ca1e62e1536ecffde54bafeb4454856ee89ea7e532f9ab1f6954e15fb41c6b29f486add69289c73268bd2687724476921324261e77123995ddc5c76b2782f8979b591716bee344d49461d0512734d3b469a67b1e1ab691cedf916ce44c45c65aa8da3991ce0de301e9371bd5f55d8a691c3bd2f66cbc3e5726b10b0dc7bfdaf7af1e2f5a4e4be262ee1aa9e11fafab1e9998a9c5e340d65a84d4630020c031200ae5581ff19aa1865c3de5c16a620ca1b18458235a5dc9357a60dc22311243f348d101cd296585da40a0041ebfe72a4d4538626dfe6abdb53ccde2be728a9ee105cb09446d46f012144037c9c72d27c3c03195d673c1a8b95dea389eb3e5eb5954eb159f02e59d07effd7596be9d71c0042ed6dfe0c899ba62e8e5f71b24ed39595d5cb5394ba331de095d59ec2153380c8ce352bfd5160c143db03c6f99ed55a13718b1115e9091b5882ee1a8d4acfa0e2f8503693987f16e1c4d613e2126aae71efaf4a7023ef09ed24eff6038b32c7de347ba762f3d6b30909647a3d0eb4dda135c510dce8cfc2cd2236f3dc22704ba5b05153483b0440b969eb3896ba926af4009a6ca84615f823bef441aaeadb7e15b9a9c5c8571be4d6985e58b617524b8ec5fd9d1cceeece9b693ab6ccd832689dc3d71b2b3438bef9a7b2677235676974a169d4b855e3f1869886d424315f483fa98fbc7a95fa41ef3ee19b12ceb4a1f62040370a4eb2422e2a4ea65df9829a23beaffea0cea8bb4c63a19e2752f0c34944da3099596aee8a5236b0b1a386c1caa41e1b889cc2165e49ebbc3537abd8a2de0ed8c5fd8f7dab7d99311556cd6bcb94b154e6681c3d99df22fc7de9677187110d97239366d3c1d0891b5c48f0e488e042ded5221a7448032031ccc61a8b32ab9d9443d62a6295618088c1962fe710032d46347636ac1f33d4bf13659c25dd171c3f8785845a6dce8c5e85d1f12cc2b5f245d5b5340f0ee203b89e00856921aed68a93f875af5693e7a4216cb92608ae3cb961023149ef4c45b6a47c53244b8368bbd941531a5987b9ad52341f00f4110fadd21e0e2137c6aa92e736420d9dc1a8a95692fbce203b5587bbecd9ccf78865f603ada6684fe05d5fda8d3e0faa30814656fe72b2cb9e4fa010dc3754596014b0dc74bd37ccb6495f5a9fc3e3826efaf28a89be0619cae65e9ea163bee200453ae341836e213568c79fdafc1c1d1584efaec6d70c04e34b1cc399e9ba6ee50f1a10cf49855221523b5a3fde96ca4443e799084ffb0a1d91e246f046e34967d79af5b4a76e4da9387a2796e043689b24332f4d919f3efd5e6209e3068f1e3d4dbfc8069c661f33d27e60e070731c71f07269b4bf1133fed80733c0d8639d9d56398e7abb7eb8bb0e24a2d63a5a5bddcf19a230c50e6c264011e924b7f8d4ace6a0f6ed921c8444c05057e49f13118e7da7f3f81621e02c08457db2a457b7478760f06277c2567e940baf1e385892e52572b4e26c31c18a971a280cf5cbc3815bbc8a8fbd7c5a7df5c1d57835bbf5b334dd16c06633d0438a6d90a9d7f38d121b658884dbad450b65f92d435369df32375f899593b1886fdbb6c112751fdabd1435be5772236fb681627fc46d230f3925a8738badc3e798d203dee101a93ae86fdc745b2eae44f5d9c719f2c8f9c158309d88752242ebd6da5dd0e502bbe819f00aab3b7b2b6e61f9dc4b71648da02bc471433eda6e46984f3eb761d509536f50d594843907145420a4cd5e5c0b0f3b319a0fa8dd50d03943dfbad2cd5a6d7914038fe8dcd43240d56387854a951ff0dc7e368b380fdb00a34622591161c913d4535d28071513e3e4a645f32bc5f68dc21b697601de664e12b57858343106cfae8674f63c5b8e07314b868b31415f3c4d350ddd9a1704142b47f5e48929ccf56116fb14e1ae0a7ae66193d2a775b525bb62087442fbd89a9311e5f7004ae235284afd200dd3a1d5cfb6340f122f505bf36b34210a4db1bf56923eb728b69323e9f21d20b36a7a20f82c93a2c4940825daea56326148793b5468788da1bafa068323df1bd3437844ae6a28cd011fc16cf9aec17247801ea97ecd66252bc372af45d5308cc43c8f98d3a96e85f8af5da746e9ddd48f4324b63677951441a572e6c6275ea7171b0a18a37b66ab2635e581bc334121781bd190a2ef468e0468c26db0a484d2f14733bd7f143692cc3de3b9864e181c493b13fbfb18772e66c9535cc7508624e4ba996462c59bb2b2900ec5d950b74a04a871ce292a604e7415ee35ed44129ffa1e5bc464832c94f79ab84a9d551f0146d1ca12b05424482a6ebd3c96bbd48046996a6ca632301e5fa33017b7ed2d5951cf6e48eff7b329cae5a0ac187deae1ad64cba7712c1a74631e79c7f0f0c2836493be049e88d67b9651a6139b636f31dfa653df2481abdbe780ed21561cc962cd6bb3540b7f7c9decdbdcd592a7f643a5b736a00bfe91c3582b0c9857b950ee50abc551aca29a702f3387cd73cb450c82c438fe8d507a6e0e02fdb3745e9c70f9f2f1e466846069570e4fe59c577ecc4ce67ddb6cfe50bb0ba49486df03e36f3137ef82ec26760bac2f9d348f1ac241136d8f4490b876c339760494f6d6f96385c4f3dd341d98690d201922d96939942e46e95721a0afbad38416bab413cf4aafd52eff1a96ec4df6c0be9c9dfa8d16265ab5beb90657501e20fc8f580021e65eace78d222e9a745f5662de9e3ce369b4dfd6af847672f46b1a11fdd1165b84f8a178e6ef7710a3ae3013daeeec15a4216f0e9476326b7df14b776185a3d7b22db840e6f11a78bc16d9b6156c433cc7466f31730a4f7e9ecd3d37c040d6d9008157668d424aa5ba79eb4ee69a74da1458dadcbd7e40455f04276952a7d9fda654fbff9d66f5de1c29080980d7536a7fc46247904e9f416189186b49845dd9c64c6b9ffc98c3138c7e7e53da6c0f90a79bb0d0b33c5abc7ebaf9d6d42e6cff41843813c5bc35dcb868ac5ccabc458e008e8fdda758aac8ce9ef2a1d5661a8ab1afffd79c46783ea423a5e1c76f38e6c091d382ae034139b87bda8a34dab606c6413a46a0c72034be19718db3dfee3506a0e8114a42cdd15d146e2c4c2f5576e80226ae0fc9f4b4e70a495fff31f3b655a35475ed7a1c0c183e668ab12ffdfd5c75fb71cef8aa7a95ecbe881e1d6a242e4b9824f7192128d86f56e17df299ac9e86b4a8216acd7939747de9404e3bb876655cfee7b95cbf18d8f3b34fe75cf83ea816df6b4644bbeba0aa4b04b6170bcd5ca8cb241f12d1c5ad16396f9da0c637db87b6430fcb3d3e3d55fe0df17aa17f7d830babeb3a967bb78b16ab93bcfde15361027d65c6cadba232b74a9f73797215bd36911626a3dabb665fc11958c678037064442bb9141fcceed84e2ce4d6d7982ddb448aa7233a58b83cc0cb429817f881666ed4895cd5d8091f195facf72a23c07ee7693df36e241e06749ad941badb94c55567eb26ee7d2d80f5b568e9952eeb8dcfa069bf987b11040413013e562ac2438074566a02d8ecf328abad0413b73baa3ad55ffa88c6d93de02e4f4072db33154715b395782ec2358faae5f3517e6d543c97ddb1e453966bca66a9b0b127ee33ee5ec9f05d48ecce923bfd0129ada6bb459db1c2bd37280bd0a89dc93985ad8fbc3e97cef89f632ba5a2da680c971d0ac0927e69fa6b75264ed4da8b32d6d4004de690e500570661a1107dc146cc201e80cdbb25df031b856f249d19ce6e055a9d96e442cce2c4e7372483d89aea4b00b2d37d1a9d3838385cac06ab2333282a7407ae23a1b8bc9298d06bea33c8d944a2c980f807dfbeed4d764efe7b6247963b1d35f65c0a80e8b2ba18e9d04aa93c1e0020a9c5d12f02e710301a99950677c437df1dd33e6ce8734d09c1d039ad7056c1be0ed5ed5321dddeb273454dfdec716b0a0e140a449d1dce5355f15afc7d5814f700b9d65b1e64e521cdf5781c6d2e314cc4bc2da395adbe1cff54059ddbae0a6ad23eb3c3adfe80294977152f75a3f01847bf6bcf46294acccc14d1aaa4a8dd67602e4f80d12e3f5f78fec14f3e758e0bb7ee6844b5647a9d40f08fc5cbb9aa95a9cdf41a46490e18bc795d9b8b64d58996d6895e104b86306a7677293979a068a9ffe31c2484d7eabba412a09e108e00ab57f3364629d74d7618a64ed415aeae19eb2cdf583655ce4d4d94db56aa69946caa3a87098cb0ffc10438a8e8ac51b110a1c26a42020b8090ed40beed57c7144066a4b96d3fcbe717b2c7704b026b6b19769b6b3da3b5e511ca51a01c44e01e83e6ef0c6c718ac5eca715cce545bf5e68323200b927e7101e21861041e5333bd58de76740c3cddec6fce105dc1d97e0d54fdd31b7b8aef", 0x1000, 0xa9e1}], 0x2000000, 0x0) chdir(&(0x7f0000000200)='./file0\x00') ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x8000000000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000140)) prlimit64(r0, 0xe, &(0x7f0000000240)={0x2, 0x100}, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x200, 0x8000) 01:48:16 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40086602, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:16 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x0, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x80000, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000080)={0x2, 0x1, @raw_data=[0x1000, 0xfffffffffffffff7, 0x100, 0x40, 0x1, 0x2, 0x5, 0x3, 0x7d, 0x1ff, 0x3, 0xfffffffffffffffe, 0x3, 0x7fffffff, 0x969, 0x9]}) 01:48:16 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x7400000000000000, 0x0, 0x0}) [ 667.105021] binder: 32463:32466 ioctl 40086602 20000040 returned -22 [ 667.106891] binder: 32464:32465 unknown command 536871360 [ 667.138534] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. [ 667.150614] binder: 32464:32465 ioctl c0306201 20000040 returned -22 [ 667.165933] binder: 32464:32481 unknown command 536871360 [ 667.177986] audit: type=1400 audit(1544665697.050:78): avc: denied { getrlimit } for pid=32462 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=process permissive=1 01:48:17 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x0, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 667.203992] binder: 32464:32481 ioctl c0306201 20000040 returned -22 01:48:17 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046207, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:17 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x4, 0x0, 0x0}) 01:48:17 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 01:48:17 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x0, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:17 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:48:17 executing program 4: mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x1000, &(0x7f00000002c0)={[{@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0x80000000}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0xe1}}], [{@smackfshat={'smackfshat', 0x3d, '/dev/kvm\x00'}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000380)=""/237, &(0x7f0000000140)=0xed) 01:48:17 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x2f, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 667.400405] binder: 32503:32508 unknown command 536871360 [ 667.428360] binder: 32503:32508 ioctl c0306201 20000040 returned -22 01:48:17 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]}) [ 667.481400] binder: 32503:32517 unknown command 536871360 [ 667.507800] binder: 32503:32517 ioctl c0306201 20000040 returned -22 01:48:17 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x0, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:17 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x6800, 0x0, 0x0}) 01:48:17 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 667.558203] binder: 32526:32529 unknown command 536871360 [ 667.591723] binder: 32526:32529 ioctl c0306201 20000040 returned -22 01:48:17 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x7, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:17 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3ff, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0xf5ae, 0x8, 0xbd, 0x80}, 0x10) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xe) ptrace$cont(0x18, r1, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 01:48:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xfffffffffffffff7, 0x41) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x2, 0x3, 0xfff, 0x8, 0x0, 0x7fff, 0x40800, 0x8, 0x2, 0x73, 0x1ff, 0x6, 0xdf, 0x6, 0x7, 0x4, 0x7, 0x80000000, 0xfffffffffffffffd, 0x2, 0x3, 0x2, 0x8000, 0x1ff, 0x0, 0x6, 0x4451, 0x4, 0x5, 0x7, 0x0, 0x127c, 0x458, 0x1, 0x8, 0xc18f, 0x0, 0xfcc3, 0x0, @perf_config_ext={0x54e5, 0xfffffffffffffeee}, 0x0, 0x2, 0x4, 0x3, 0x100, 0x1bf800, 0x1}, r3, 0xffffffffffffffff, r3, 0xc) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20fb5141", @ANYRES16=r4, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x800}, 0x45) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 667.681976] binder: 32538:32545 unknown command 536871360 [ 667.713859] binder: 32538:32545 ioctl c0306201 20000040 returned -22 01:48:17 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x0, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:17 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}) [ 667.758674] binder: 32549:32551 unknown command 536871360 [ 667.787495] binder: 32538:32556 unknown command 536871360 [ 667.799411] binder: 32549:32551 ioctl c0306201 20000040 returned -22 [ 667.837721] binder: 32538:32556 ioctl c0306201 20000040 returned -22 01:48:17 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}) 01:48:17 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x700, 0x0, 0x0}) 01:48:17 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:17 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x20000, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000300)="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", 0x1000) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:48:17 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x0, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) 01:48:17 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}) [ 668.036364] binder: 32579:32583 unknown command 536871360 [ 668.096228] binder: 32579:32583 ioctl c0306201 20000040 returned -22 [ 668.097141] binder: 32591:32596 unknown command 536871360 [ 668.120690] binder: 32579:32603 unknown command 536871360 [ 668.138685] binder: 32579:32603 ioctl c0306201 20000040 returned -22 01:48:18 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x0, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 668.145917] binder: 32591:32596 ioctl c0306201 20000040 returned -22 01:48:18 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x7a, 0x0, 0x0}) 01:48:18 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3d, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={0x0, r3, 0x0, 0x1}, 0x14) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x244000, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x27, 0x5, 0xc, 0x16, 0x8, 0x8, 0x0, 0x92}}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x80000000000000, 0x0, 0x10000000000000, 0x0, 0x20}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x81) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x800, 0x0) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000300)={&(0x7f0000ffa000/0x4000)=nil, 0x9, 0x2, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x400}) preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/210, 0xd2}], 0x1, 0x25) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000540)=""/194) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f00000000c0)=""/106) socket$netlink(0x10, 0x3, 0x0) 01:48:18 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 01:48:18 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x0, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 668.333158] binder: 32622:32624 unknown command 536871360 [ 668.369512] binder: 32625:32629 unknown command 536871360 [ 668.376815] binder: 32622:32624 ioctl c0306201 20000040 returned -22 01:48:18 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]}) [ 668.401692] binder: 32625:32629 ioctl c0306201 20000040 returned -22 [ 668.440891] binder: 32625:32646 unknown command 536871360 01:48:18 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x0, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 668.475097] binder: 32625:32646 ioctl c0306201 20000040 returned -22 01:48:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:48:21 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:21 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400002, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @dev}, &(0x7f0000000140)=0xc) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000180)={@loopback, r2}, 0x14) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:48:21 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x400000000000000, 0x0, 0x0}) 01:48:21 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]}) 01:48:21 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x0, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 671.161459] binder: 32664:32673 unknown command 536871360 [ 671.172845] binder: 32665:32666 unknown command 536871360 [ 671.190251] binder: 32665:32666 ioctl c0306201 20000040 returned -22 [ 671.197699] binder: 32664:32673 ioctl c0306201 20000040 returned -22 01:48:21 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x0, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:21 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x800, 0x200001) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000300)) r1 = gettid() r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r2, 0xb20, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x18, 0xd7fc, @l2={'eth', 0x3a, 'vcan0\x00'}}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x108, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}}, 0x4000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000040)=@raw=[@exit, @map={0x18, 0x0, 0x1, 0x0, 0xffffffffffffff9c}, @generic={0x1ff, 0xb2, 0x100, 0x1000, 0x8}, @ldst={0x3, 0x0, 0x2, 0x8, 0x2, 0x6, 0xfffffffffffffffc}], &(0x7f0000000080)='syzkaller\x00', 0x100000001, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xe}, 0x48) fcntl$setown(r3, 0x8, r1) tkill(r1, 0xe) ptrace$cont(0x18, r1, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000140)="c1983871af92df180427acc345ba76cdf002cf79c475cebf4929fdd7062033e26c9a64e3e360e4c24137b22e98242cb5ca6b15f7d00a06c15b0df5ba96b2a1f5b5a58f6dd5f351d05b30253fa40d4eca977e6566e7d7d8b520291b5b414e704d95a2933e0e9c930ee02268adeb3bf6ffff338ed7a34ca5a04d2fb855f8d421a4e231439e6be572302bcc4b42a43007fa7ee38ecc74a236f0da0279cd8b51141f0c7885") ptrace$cont(0x1f, r1, 0x0, 0x0) [ 671.227538] binder: 32664:32684 unknown command 536871360 [ 671.233118] binder: 32664:32684 ioctl c0306201 20000040 returned -22 01:48:21 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x6800000000000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:21 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 01:48:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x402000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:48:21 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:21 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x6c00000000000000, 0x0, 0x0}) 01:48:21 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x6c00000000000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x0, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x800000, &(0x7f0000000380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/kvm\x00'}}, {@subj_type={'subj_type', 0x3d, 'wlan1'}}]}}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:48:21 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:48:21 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}) 01:48:21 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 671.534457] binder: 32718:32719 unknown command 536871360 01:48:21 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x3000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 671.582087] binder: 32718:32719 ioctl c0306201 20000040 returned -22 [ 671.616305] binder: 32718:32739 unknown command 536871360 01:48:21 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 671.650201] binder: 32718:32739 ioctl c0306201 20000040 returned -22 01:48:21 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 01:48:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) open_by_handle_at(r1, &(0x7f00000002c0)={0x1e6, 0x20, "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"}, 0x240200) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000100)=0x1) getsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 01:48:21 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x7400, 0x0, 0x0}) 01:48:21 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 01:48:21 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0xffffff7f, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:21 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x2018, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 671.845183] binder: 300:301 unknown command 536871360 01:48:21 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}) 01:48:21 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 671.875944] binder: 300:301 ioctl c0306201 20000040 returned -22 01:48:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x101000, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff7, 0x400100) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x22}) [ 671.959040] binder: 300:324 unknown command 536871360 01:48:21 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 01:48:21 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x6800, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 672.006484] binder: 300:324 ioctl c0306201 20000040 returned -22 01:48:21 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:22 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x20000000000000) 01:48:22 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x500, 0x0, 0x0}) 01:48:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000000000d2000400030001f8"], 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:48:22 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 01:48:22 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 672.225244] binder: 362:365 unknown command 536871360 01:48:22 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x117, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0x7}}, 0x18) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xe) ptrace$cont(0x18, r2, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000280)=""/63) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) chroot(&(0x7f0000000300)='./file0\x00') ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) [ 672.267950] binder: 362:365 ioctl c0306201 20000040 returned -22 01:48:22 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) [ 672.334756] binder: 362:382 unknown command 536871360 01:48:22 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x7400, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x10000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000200)=[0x0, 0xee00, 0x0, 0x0, 0x0, 0xee01, 0xffffffffffffffff]) r6 = fcntl$getown(r1, 0x9) r7 = geteuid() r8 = gettid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000500)=0xc) getgroups(0x4, &(0x7f0000000540)=[0x0, 0xee01, 0xee00, 0xee00]) sendmsg$netlink(r2, &(0x7f0000000680)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f00000000c0)=[{&(0x7f00000002c0)={0x23c, 0x1f, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0xec, 0x93, [@typed={0x4, 0x92}, @generic="aca9080c80513656b589862dcb94b120299285dd9b8356ad272f1a2ec0bfb1b620b4b018268d6df9663667036aa19de859c89bbed9d5d8fc5fac98751167392f0f3efb0357aa871f0967b70b0ab8fdc6acad2b43588cafa98fa8250f15b21a046cee2ade3c519854038f318f2a1747b600f72eac682e385b0b18fa0a1eab20a2b435e426296f3d0ba35e033d5df083fa1ce8ac8c41738fc96df5121d356cbc4a6875a287df1158b89a848b9fd7413fa991115e7724a82c94db1cdb61a02f4b2712a6e1bab7a567fff768b0d110a8ea9c04c3790e8da0af0053cf45fec5e4728026a8be"]}, @generic="35345fbe333e4f392cb105afdb411f7f72b29fd20bc122a77f7ac0e313783067ff4502feefd2", @nested={0xb8, 0x57, [@typed={0x8, 0x8d, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @typed={0x8, 0x11, @fd=r1}, @generic="bbe082e831410f819bbbc6ef2ddd470bd6399844571bab87c0a916be4847b6cb2f211950428dae3eccfbb8263a7ded27bacb1e08", @generic="90e5381fcffada006ae48393b14adac6016671c045605728b85dd0dce14fe57a28ff1dbcf6d5df2e8827cd0674bb81fadff15369edc0266ab2461bf8dbd4fadd082334942db963847dfe93e9ce44665cf4c9d84b3e773254434ebb46c2efac159fc3f648263b09859e4c52fa599742"]}, @typed={0x14, 0x4b, @ipv6=@mcast1}, @generic="636246467f2f1a476e5331da8a8e07ff094a576800c653b838ed4c54989cf2ef683abc81a26f6a1599ffa08e03b214c514f23d9852640d37a4e2fc3f73ac2cde6e17f2a0779d91e9919b46"]}, 0x23c}], 0x1, &(0x7f0000000580)=[@rights={0x20, 0x1, 0x1, [r1, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x20, 0x1, 0x1, [r1, r0, r1, r0]}, @cred={0x20, 0x1, 0x2, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r1, r1, r1]}], 0xd8, 0x40000}, 0x20000010) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r11, 0x4040ae9e, &(0x7f00000006c0)={0x400000000000000, 0x1, 0x0, 0x0, 0x23}) [ 672.362067] binder: 362:382 ioctl c0306201 20000040 returned -22 01:48:22 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, 0x0, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:22 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) 01:48:22 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x8, 0x2) io_setup(0x200, &(0x7f00000002c0)) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x400, 0x82) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x6, 0x7ff, 0x8, 0x3, 0x1}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000180)={r2, 0x40, "ecce3da8b405b02d2fe60b986c2729c0a6bc0363396bfd0ee544d71c4b0c66fa23d0eb063166be739105705ca1dc4c02e7ada5dc3035e0da03e57f88a5c00eb6"}, &(0x7f0000000200)=0x48) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:48:22 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x100000000000000, 0x0, 0x0}) 01:48:22 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x2, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:22 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, 0x0, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:22 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}) [ 672.606566] binder: 422:424 unknown command 536871360 01:48:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400000) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 672.645346] binder: 422:424 ioctl c0306201 20000040 returned -22 [ 672.673254] binder: 426:427 unknown command 8192 01:48:22 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]}) [ 672.692793] binder: 426:427 ioctl c0306201 20000040 returned -22 [ 672.702506] binder: 422:429 unknown command 536871360 [ 672.725841] binder: 422:429 ioctl c0306201 20000040 returned -22 01:48:22 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x3, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:22 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x500000000000000, 0x0, 0x0}) 01:48:22 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, 0x0, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:22 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) [ 672.826713] binder: 454:455 unknown command 32 01:48:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x40000, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 672.874077] binder: 454:455 ioctl c0306201 20000040 returned -22 [ 672.933786] binder: 458:462 unknown command 536871360 [ 672.965763] binder: 458:462 ioctl c0306201 20000040 returned -22 [ 673.016162] binder: 458:477 unknown command 536871360 [ 673.025469] binder: 458:477 ioctl c0306201 20000040 returned -22 01:48:25 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:25 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x6000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) flock(r0, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0xa0800, 0x0) write$9p(r1, &(0x7f0000000080)="b892c4de63dc7f8a5bd712f5d9ee15bf83b7b9c982d11547bd6d5ac51b0b27cfe122663ef866282a0637299e86a4244cb88b77ed7542a8a466fa299719fbda0558ae94dd3a94062b39c280f8f5017073f4c843f79b5d5802845aa903e153c6d5f7e4fcc4389994dcf7", 0x69) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) 01:48:25 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7fffffff, 0x40401) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000300)={"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"}) wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:48:25 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]}) 01:48:25 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x6800000000000000, 0x0, 0x0}) 01:48:25 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) [ 675.608852] binder: 485:487 unknown command 536871360 [ 675.614395] binder: 485:487 ioctl c0306201 20000040 returned -22 01:48:25 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:25 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/116) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x80000000000, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:48:25 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 675.718027] binder: 485:509 unknown command 536871360 [ 675.755712] binder: 485:509 ioctl c0306201 20000040 returned -22 01:48:25 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x68, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:25 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 01:48:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000000c0)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x200000, 0x0) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000080)={0x2, 0x1, [0x0, 0x1, 0x4, 0x1, 0x1ff, 0x8000, 0x4, 0xffffffff]}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x2000, 0x0, 0x0, 0x20}) 01:48:25 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:25 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0xffffff7f, 0x0, 0x0}) 01:48:25 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:25 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x84000, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) tkill(r0, 0x21) prctl$PR_SET_DUMPABLE(0x4, 0x2) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x600000, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x9, 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0xfffffffffffffffe) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x1000, 0xebd8, 0x8, 0x5}, {0x4790, 0x3fa, 0x401, 0x1ff}, {0x0, 0x101, 0x0, 0x9}]}) 01:48:25 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x400000000000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 675.971773] binder: 532:534 unknown command 536871360 [ 675.984370] binder: 532:534 ioctl c0306201 20000040 returned -22 [ 676.008803] binder: 532:540 unknown command 536871360 01:48:25 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]}) 01:48:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x400000) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f00000000c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x20}) [ 676.056487] binder: 532:540 ioctl c0306201 20000040 returned -22 01:48:26 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x6, 0x0, 0x0}) 01:48:26 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 676.186922] audit: type=1326 audit(1544665706.060:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=556 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a4da code=0x0 01:48:26 executing program 4: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:26 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 676.276124] binder: 560:563 unknown command 536871360 [ 676.295737] binder: 560:563 ioctl c0306201 20000040 returned -22 [ 676.334987] binder: 560:566 unknown command 536871360 [ 676.352156] binder: 560:566 ioctl c0306201 20000040 returned -22 01:48:26 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x6c00, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 676.384193] binder: 568:569 unknown command 536871360 01:48:26 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780), 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 676.418036] binder: 568:569 ioctl c0306201 20000040 returned -22 01:48:26 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x5, 0x0, 0x0}) 01:48:26 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x4800000000000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 676.563890] binder: 580:583 unknown command 536871360 [ 676.585919] binder: 580:583 ioctl c0306201 20000040 returned -22 [ 676.615815] binder: 580:589 unknown command 536871360 [ 676.625923] binder: 580:589 ioctl c0306201 20000040 returned -22 01:48:26 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() process_vm_readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/143, 0x8f}, {&(0x7f0000000300)=""/201, 0xc9}, {&(0x7f0000000040)=""/51, 0x33}], 0x3, &(0x7f0000001800)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/234, 0xea}, {&(0x7f0000000200)=""/122, 0x7a}, {&(0x7f0000001500)=""/125, 0x7d}, {&(0x7f0000000280)=""/30, 0x1e}, {&(0x7f0000001580)=""/49, 0x31}, {&(0x7f00000015c0)=""/224, 0xe0}, {&(0x7f00000016c0)=""/173, 0xad}, {&(0x7f0000001780)=""/73, 0x49}], 0x9, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000018c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000001940)={0x2, 0x2}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:48:26 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) sched_getscheduler(r0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) syz_mount_image$minix(&(0x7f00000003c0)='minix\x00', &(0x7f0000000400)='./file0\x00', 0xfff, 0x9, &(0x7f0000002800)=[{&(0x7f0000000440)="fa3353125de7e02f6b959d81463fc33942c794c78570ccac0547fae341cd8c03f324205c0caa3373257fcd2b57725687c0517dc10727247ca05d013e8cb7c60c7fe520ff7bcc5d525a7b7dce9af420de3f3dcee42d458ac9ef222e6cbcae1c9c0c6cfa384e26be0e7259fc0eb3066e5012b52e9d98e70c454abd321fc4363cb9e8c31dc7b848ac917df35a81ba8df668c2793dab", 0x94, 0x8}, {&(0x7f0000000500)="6fb0bd37d876c20a0f6253d6ef2d80fb0d8ff334dd30c705c50be588e6d468f02d004c68412f", 0x26, 0x3}, {&(0x7f0000000540)="80a4", 0x2}, {&(0x7f0000000580)="1de56375ab8180e350ce7e2183ee3fa598e95acafd2e4d057fb1e5ed178009e6b97cf1146cf2866b3c029208bb6fa184bf09bf17829bef2c5a6caf6d111513b0ba6caeb9acae28a4127d759ceadda1c6c3d609a268e23239cdb38ee17063232f8a4a2a0fc8c802bab2570cc41bb3d48eb98136ad81d07e465b50c1e97e0e007b351cf0210e7510a087d15a12a5df315b6276095aa61679a47b6327a6410e8146f36f6b042143ecf73775", 0xaa, 0x5}, {&(0x7f0000000640)="b67303dbce665f833f87e6bfc1beb3a391b1e8ea2568d493b02cb59816c682d3ddd407ff137281444d9444137d73bbc1beeba87f8d46eef0d41501185ed67ade64ac96cbbdd0e1ab044fc3a9e54fd37a4dfbfcf7f59ff6b5082b631b52bf129b83bdfa1f49b47cb5b8f75d5a085924f7b11b7bf91cfd0a2c76d2c2f1b3f55aae1969c8e32a01bc2b13360c2504e6380856b1397b0e8b2617955f4c32d0ac78eeaa6bf607e71a3733cf30d8481cce4b9d9a658f7dcda96fc48833dd15bc164715d776f6797a478211c1af72807bb7c62e7d3190f43be7", 0xd6, 0x1ff}, {&(0x7f0000000740)="cf477ad7013ee0a53e081899d6df21f9ef29fb7a27521bc19f5fa4f4334401a566507b163895686cc463cc649d105fbaab98bd9b", 0x34, 0x10000}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="661ec340dafedfac6fc4b8f62a38639e15615fa5b3f8c4f928a4de8d98e9c28f96cea1010804fcfd457dc548f2ded72275c719b1b3e76be2812d3f75b41bc75c3b11ca4133bb8d048e2587e34b13cd72", 0x50}, {&(0x7f0000001800)="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", 0x1000, 0xa9e1}], 0x2000000, 0x0) chdir(&(0x7f0000000200)='./file0\x00') ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x8000000000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000140)) prlimit64(r0, 0xe, &(0x7f0000000240)={0x2, 0x100}, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x200, 0x8000) 01:48:26 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 01:48:26 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x500, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:26 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780), 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:26 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x6000000, 0x0, 0x0}) 01:48:26 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) sched_getscheduler(r0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) syz_mount_image$minix(&(0x7f00000003c0)='minix\x00', &(0x7f0000000400)='./file0\x00', 0xfff, 0x9, &(0x7f0000002800)=[{&(0x7f0000000440)="fa3353125de7e02f6b959d81463fc33942c794c78570ccac0547fae341cd8c03f324205c0caa3373257fcd2b57725687c0517dc10727247ca05d013e8cb7c60c7fe520ff7bcc5d525a7b7dce9af420de3f3dcee42d458ac9ef222e6cbcae1c9c0c6cfa384e26be0e7259fc0eb3066e5012b52e9d98e70c454abd321fc4363cb9e8c31dc7b848ac917df35a81ba8df668c2793dab", 0x94, 0x8}, {&(0x7f0000000500)="6fb0bd37d876c20a0f6253d6ef2d80fb0d8ff334dd30c705c50be588e6d468f02d004c68412f", 0x26, 0x3}, {&(0x7f0000000540)="80a4", 0x2}, {&(0x7f0000000580)="1de56375ab8180e350ce7e2183ee3fa598e95acafd2e4d057fb1e5ed178009e6b97cf1146cf2866b3c029208bb6fa184bf09bf17829bef2c5a6caf6d111513b0ba6caeb9acae28a4127d759ceadda1c6c3d609a268e23239cdb38ee17063232f8a4a2a0fc8c802bab2570cc41bb3d48eb98136ad81d07e465b50c1e97e0e007b351cf0210e7510a087d15a12a5df315b6276095aa61679a47b6327a6410e8146f36f6b042143ecf73775", 0xaa, 0x5}, {&(0x7f0000000640)="b67303dbce665f833f87e6bfc1beb3a391b1e8ea2568d493b02cb59816c682d3ddd407ff137281444d9444137d73bbc1beeba87f8d46eef0d41501185ed67ade64ac96cbbdd0e1ab044fc3a9e54fd37a4dfbfcf7f59ff6b5082b631b52bf129b83bdfa1f49b47cb5b8f75d5a085924f7b11b7bf91cfd0a2c76d2c2f1b3f55aae1969c8e32a01bc2b13360c2504e6380856b1397b0e8b2617955f4c32d0ac78eeaa6bf607e71a3733cf30d8481cce4b9d9a658f7dcda96fc48833dd15bc164715d776f6797a478211c1af72807bb7c62e7d3190f43be7", 0xd6, 0x1ff}, {&(0x7f0000000740)="cf477ad7013ee0a53e081899d6df21f9ef29fb7a27521bc19f5fa4f4334401a566507b163895686cc463cc649d105fbaab98bd9b", 0x34, 0x10000}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="661ec340dafedfac6fc4b8f62a38639e15615fa5b3f8c4f928a4de8d98e9c28f96cea1010804fcfd457dc548f2ded72275c719b1b3e76be2812d3f75b41bc75c3b11ca4133bb8d048e2587e34b13cd72", 0x50}, {&(0x7f0000001800)="f68c1af8f9c72bed557d3d78cb817895bf77630ada629ab5e33951145874d4c2267ffdddf14f8f163be69502bf932dc39c90b24ca86ee2c2fb32cb88d61a767ef599243a296387be13651f75addda6113d1c4d1c8462109dbd1f08128f36599e92d5ca8feb35ed9d61277ff60b3adc61fd98e8a3a842fa57ec694357c6abc945278e103ecdd1a235b64f4fba09ba577f1709a34766e1c29543d7052e3001fdecfdc35bd1942def17e30c5e677798676dac4b13548965d1986f7521056c27d77c259d429b1b915427c7df4629b8d872d1248b11702dfe7ccabe26e83b92f3da467a832ce9a1f5afea4f5caa251067cdfed9b8fe5f62cc442026c912e02c6cb351404d01a857ef61be03d6089b86cabe027fca90b258c6494becde2333ef65ff3b0a29e511720d5029b046cb14ae27d665fc3cc41c1eebfa0b71789d63f70fe94eba15aeb55aea42de38eacacf32e52f666ec8f4fa67d4ad46f455f2dbed32843dbbad93b7c05387c1c6efbefeac3f8808f00910623cb4f1c7be99cbf715a01ceb4d27827c82409e166458c39974f6c87530de802238e1f5116cf689ef3d861f899b2608e2d13735f6df1318a8b68561b628569222320d07f2beb61ec79b332f546ad7fc6a9f2fff27a8a32a2b696f2cea77a8b98d2dbe07442c3164acccbb5478411ac9a66c121a54c8ad5dc0720923bbbb903b90e5958e57d294f0915b3e3a9ac6e1dbfdd710149486458d52ba2a4c5fc10505f7d2905200d36435ad4e7f8fb72b24a91e4a4288d9e2bb80253bf361fd8188ef2e0450e4729e77607cc79693b8e62a7b39d03ab357478342df96b29deddcdf9c92016eb7b57b36048be3f14d26f289c0edc293c103c332cebd5c66c843b51fb76e195a096bfb170316728102ae87eee701b2cccb2cae549b8b8a4263b87cff742aeb65039a482fe099b3ea75bd0e5418aa86bfa008778c6c37cde3975ca5e8428c45e1d5f316e726a8de0f23f38bf2e67e5720ab681a3dac2a0177942cec527aa4ac9987eb90ecfaf1d632b5547888e7875ecff3bd937cec6e66233a6c81e46130882fa75e2bcddb8ec270f6207f1762d0bdd4ac716430fb6729c2abe7e6d9356462a9a88409a84bf97a91a671fd04a1218927b71ae0198ded86c050b4433c94d61cc70d47ffcaf71218163adb80ae719023b33b33cf499c70e395946c70e58add06145ada2159636f4b4904de3bde87f481632cbb8b83d18b55a1f4ccf1833b19b40cdfaee2e765bd225ba2d26d9a312a7c6984b9b2c62cb23e49e6ffea4b0a05edadd73ca44bb7929b74901ecd2ab4ce152d433b8513fe137ee351e485024f807e3305955e696759695121530939a003e0cda39be2d4e6d3e8661714fd9c55223248e86a01e635c2ca1e62e1536ecffde54bafeb4454856ee89ea7e532f9ab1f6954e15fb41c6b29f486add69289c73268bd2687724476921324261e77123995ddc5c76b2782f8979b591716bee344d49461d0512734d3b469a67b1e1ab691cedf916ce44c45c65aa8da3991ce0de301e9371bd5f55d8a691c3bd2f66cbc3e5726b10b0dc7bfdaf7af1e2f5a4e4be262ee1aa9e11fafab1e9998a9c5e340d65a84d4630020c031200ae5581ff19aa1865c3de5c16a620ca1b18458235a5dc9357a60dc22311243f348d101cd296585da40a0041ebfe72a4d4538626dfe6abdb53ccde2be728a9ee105cb09446d46f012144037c9c72d27c3c03195d673c1a8b95dea389eb3e5eb5954eb159f02e59d07effd7596be9d71c0042ed6dfe0c899ba62e8e5f71b24ed39595d5cb5394ba331de095d59ec2153380c8ce352bfd5160c143db03c6f99ed55a13718b1115e9091b5882ee1a8d4acfa0e2f8503693987f16e1c4d613e2126aae71efaf4a7023ef09ed24eff6038b32c7de347ba762f3d6b30909647a3d0eb4dda135c510dce8cfc2cd2236f3dc22704ba5b05153483b0440b969eb3896ba926af4009a6ca84615f823bef441aaeadb7e15b9a9c5c8571be4d6985e58b617524b8ec5fd9d1cceeece9b693ab6ccd832689dc3d71b2b3438bef9a7b2677235676974a169d4b855e3f1869886d424315f483fa98fbc7a95fa41ef3ee19b12ceb4a1f62040370a4eb2422e2a4ea65df9829a23beaffea0cea8bb4c63a19e2752f0c34944da3099596aee8a5236b0b1a386c1caa41e1b889cc2165e49ebbc3537abd8a2de0ed8c5fd8f7dab7d99311556cd6bcb94b154e6681c3d99df22fc7de9677187110d97239366d3c1d0891b5c48f0e488e042ded5221a7448032031ccc61a8b32ab9d9443d62a6295618088c1962fe710032d46347636ac1f33d4bf13659c25dd171c3f8785845a6dce8c5e85d1f12cc2b5f245d5b5340f0ee203b89e00856921aed68a93f875af5693e7a4216cb92608ae3cb961023149ef4c45b6a47c53244b8368bbd941531a5987b9ad52341f00f4110fadd21e0e2137c6aa92e736420d9dc1a8a95692fbce203b5587bbecd9ccf78865f603ada6684fe05d5fda8d3e0faa30814656fe72b2cb9e4fa010dc3754596014b0dc74bd37ccb6495f5a9fc3e3826efaf28a89be0619cae65e9ea163bee200453ae341836e213568c79fdafc1c1d1584efaec6d70c04e34b1cc399e9ba6ee50f1a10cf49855221523b5a3fde96ca4443e799084ffb0a1d91e246f046e34967d79af5b4a76e4da9387a2796e043689b24332f4d919f3efd5e6209e3068f1e3d4dbfc8069c661f33d27e60e070731c71f07269b4bf1133fed80733c0d8639d9d56398e7abb7eb8bb0e24a2d63a5a5bddcf19a230c50e6c264011e924b7f8d4ace6a0f6ed921c8444c05057e49f13118e7da7f3f81621e02c08457db2a457b7478760f06277c2567e940baf1e385892e52572b4e26c31c18a971a280cf5cbc3815bbc8a8fbd7c5a7df5c1d57835bbf5b334dd16c06633d0438a6d90a9d7f38d121b658884dbad450b65f92d435369df32375f899593b1886fdbb6c112751fdabd1435be5772236fb681627fc46d230f3925a8738badc3e798d203dee101a93ae86fdc745b2eae44f5d9c719f2c8f9c158309d88752242ebd6da5dd0e502bbe819f00aab3b7b2b6e61f9dc4b71648da02bc471433eda6e46984f3eb761d509536f50d594843907145420a4cd5e5c0b0f3b319a0fa8dd50d03943dfbad2cd5a6d7914038fe8dcd43240d56387854a951ff0dc7e368b380fdb00a34622591161c913d4535d28071513e3e4a645f32bc5f68dc21b697601de664e12b57858343106cfae8674f63c5b8e07314b868b31415f3c4d350ddd9a1704142b47f5e48929ccf56116fb14e1ae0a7ae66193d2a775b525bb62087442fbd89a9311e5f7004ae235284afd200dd3a1d5cfb6340f122f505bf36b34210a4db1bf56923eb728b69323e9f21d20b36a7a20f82c93a2c4940825daea56326148793b5468788da1bafa068323df1bd3437844ae6a28cd011fc16cf9aec17247801ea97ecd66252bc372af45d5308cc43c8f98d3a96e85f8af5da746e9ddd48f4324b63677951441a572e6c6275ea7171b0a18a37b66ab2635e581bc334121781bd190a2ef468e0468c26db0a484d2f14733bd7f143692cc3de3b9864e181c493b13fbfb18772e66c9535cc7508624e4ba996462c59bb2b2900ec5d950b74a04a871ce292a604e7415ee35ed44129ffa1e5bc464832c94f79ab84a9d551f0146d1ca12b05424482a6ebd3c96bbd48046996a6ca632301e5fa33017b7ed2d5951cf6e48eff7b329cae5a0ac187deae1ad64cba7712c1a74631e79c7f0f0c2836493be049e88d67b9651a6139b636f31dfa653df2481abdbe780ed21561cc962cd6bb3540b7f7c9decdbdcd592a7f643a5b736a00bfe91c3582b0c9857b950ee50abc551aca29a702f3387cd73cb450c82c438fe8d507a6e0e02fdb3745e9c70f9f2f1e466846069570e4fe59c577ecc4ce67ddb6cfe50bb0ba49486df03e36f3137ef82ec26760bac2f9d348f1ac241136d8f4490b876c339760494f6d6f96385c4f3dd341d98690d201922d96939942e46e95721a0afbad38416bab413cf4aafd52eff1a96ec4df6c0be9c9dfa8d16265ab5beb90657501e20fc8f580021e65eace78d222e9a745f5662de9e3ce369b4dfd6af847672f46b1a11fdd1165b84f8a178e6ef7710a3ae3013daeeec15a4216f0e9476326b7df14b776185a3d7b22db840e6f11a78bc16d9b6156c433cc7466f31730a4f7e9ecd3d37c040d6d9008157668d424aa5ba79eb4ee69a74da1458dadcbd7e40455f04276952a7d9fda654fbff9d66f5de1c29080980d7536a7fc46247904e9f416189186b49845dd9c64c6b9ffc98c3138c7e7e53da6c0f90a79bb0d0b33c5abc7ebaf9d6d42e6cff41843813c5bc35dcb868ac5ccabc458e008e8fdda758aac8ce9ef2a1d5661a8ab1afffd79c46783ea423a5e1c76f38e6c091d382ae034139b87bda8a34dab606c6413a46a0c72034be19718db3dfee3506a0e8114a42cdd15d146e2c4c2f5576e80226ae0fc9f4b4e70a495fff31f3b655a35475ed7a1c0c183e668ab12ffdfd5c75fb71cef8aa7a95ecbe881e1d6a242e4b9824f7192128d86f56e17df299ac9e86b4a8216acd7939747de9404e3bb876655cfee7b95cbf18d8f3b34fe75cf83ea816df6b4644bbeba0aa4b04b6170bcd5ca8cb241f12d1c5ad16396f9da0c637db87b6430fcb3d3e3d55fe0df17aa17f7d830babeb3a967bb78b16ab93bcfde15361027d65c6cadba232b74a9f73797215bd36911626a3dabb665fc11958c678037064442bb9141fcceed84e2ce4d6d7982ddb448aa7233a58b83cc0cb429817f881666ed4895cd5d8091f195facf72a23c07ee7693df36e241e06749ad941badb94c55567eb26ee7d2d80f5b568e9952eeb8dcfa069bf987b11040413013e562ac2438074566a02d8ecf328abad0413b73baa3ad55ffa88c6d93de02e4f4072db33154715b395782ec2358faae5f3517e6d543c97ddb1e453966bca66a9b0b127ee33ee5ec9f05d48ecce923bfd0129ada6bb459db1c2bd37280bd0a89dc93985ad8fbc3e97cef89f632ba5a2da680c971d0ac0927e69fa6b75264ed4da8b32d6d4004de690e500570661a1107dc146cc201e80cdbb25df031b856f249d19ce6e055a9d96e442cce2c4e7372483d89aea4b00b2d37d1a9d3838385cac06ab2333282a7407ae23a1b8bc9298d06bea33c8d944a2c980f807dfbeed4d764efe7b6247963b1d35f65c0a80e8b2ba18e9d04aa93c1e0020a9c5d12f02e710301a99950677c437df1dd33e6ce8734d09c1d039ad7056c1be0ed5ed5321dddeb273454dfdec716b0a0e140a449d1dce5355f15afc7d5814f700b9d65b1e64e521cdf5781c6d2e314cc4bc2da395adbe1cff54059ddbae0a6ad23eb3c3adfe80294977152f75a3f01847bf6bcf46294acccc14d1aaa4a8dd67602e4f80d12e3f5f78fec14f3e758e0bb7ee6844b5647a9d40f08fc5cbb9aa95a9cdf41a46490e18bc795d9b8b64d58996d6895e104b86306a7677293979a068a9ffe31c2484d7eabba412a09e108e00ab57f3364629d74d7618a64ed415aeae19eb2cdf583655ce4d4d94db56aa69946caa3a87098cb0ffc10438a8e8ac51b110a1c26a42020b8090ed40beed57c7144066a4b96d3fcbe717b2c7704b026b6b19769b6b3da3b5e511ca51a01c44e01e83e6ef0c6c718ac5eca715cce545bf5e68323200b927e7101e21861041e5333bd58de76740c3cddec6fce105dc1d97e0d54fdd31b7b8aef", 0x1000, 0xa9e1}], 0x2000000, 0x0) chdir(&(0x7f0000000200)='./file0\x00') ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x8000000000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000140)) prlimit64(r0, 0xe, &(0x7f0000000240)={0x2, 0x100}, &(0x7f0000000280)) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x200, 0x8000) 01:48:26 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x7ffffffe, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0xffffffffffffff35, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0xfffffffffffffffe) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:48:26 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x2, 0x800) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0xaa, 0x5, 0x6, 0x5, 0x0, 0x5, 0x40101, 0x4, 0x1000, 0x100, 0x80000000, 0x6, 0x9, 0x6d, 0x3ff, 0x7, 0x4c, 0x8, 0x8000, 0x0, 0x8, 0x8, 0x6, 0x83, 0x401, 0x56be, 0x4, 0x7, 0x0, 0x8, 0xffff, 0x1400000000000000, 0x6, 0x3, 0xfff, 0x2, 0x0, 0x1ffb, 0x4, @perf_config_ext={0x1000, 0x7}, 0x10000, 0x10000, 0x0, 0x0, 0xc2a, 0xfff}, r0, 0x6, r1, 0x8) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 676.856344] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. [ 676.869616] binder: 610:613 unknown command 536871360 [ 676.874970] binder: 610:613 ioctl c0306201 20000040 returned -22 01:48:26 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780), 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:26 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x20000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 676.960915] binder: 610:628 unknown command 536871360 [ 676.981654] binder: 610:628 ioctl c0306201 20000040 returned -22 01:48:26 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x48, 0x0, 0x0}) 01:48:26 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:26 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e21, @rand_addr=0x100000000}}, 0x9, 0x2}, &(0x7f00000003c0)=0x90) wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) clock_adjtime(0x6, &(0x7f0000000140)={0x5, 0x9, 0xfffffffffffffffb, 0x8001, 0x96, 0x789e29c9, 0x5, 0x20, 0x9, 0x2, 0x5, 0x13, 0x7, 0x4c, 0x1, 0x8, 0x2, 0x9, 0x3, 0x7, 0x5, 0x3, 0x9, 0x4, 0x6, 0x3}) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101200, 0x0) 01:48:27 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x700, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 677.114417] IPVS: ftp: loaded support on port[0] = 21 [ 677.147121] binder: 640:641 unknown command 536871360 [ 677.152633] binder: 640:641 ioctl c0306201 20000040 returned -22 [ 677.213178] binder: 640:656 unknown command 536871360 [ 677.228391] binder: 640:656 ioctl c0306201 20000040 returned -22 [ 677.335807] device bridge_slave_1 left promiscuous mode [ 677.341451] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.396224] device bridge_slave_0 left promiscuous mode [ 677.401826] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.464674] team0 (unregistering): Port device team_slave_1 removed [ 677.474517] team0 (unregistering): Port device team_slave_0 removed [ 677.484700] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 677.529416] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 677.583488] bond0 (unregistering): Released all slaves [ 678.130712] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.137385] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.144764] device bridge_slave_0 entered promiscuous mode [ 678.189444] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.195964] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.203240] device bridge_slave_1 entered promiscuous mode [ 678.249366] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 678.293949] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 678.425049] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 678.469995] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 678.668716] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 678.676532] team0: Port device team_slave_0 added [ 678.719023] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 678.726422] team0: Port device team_slave_1 added [ 678.767410] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 678.774240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 678.789685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 678.825348] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 678.832744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 678.848634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 678.885014] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 678.892217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 678.908340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 678.935163] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 678.942829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 678.951158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 679.237000] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.243350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.249978] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.256331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.263423] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 679.805777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 680.193672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.285087] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 680.371245] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 680.377601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 680.384616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 680.472281] 8021q: adding VLAN 0 to HW filter on device team0 01:48:30 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 01:48:30 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xffffffff, 0x81) read(r1, &(0x7f0000000080), 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:48:30 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:30 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:30 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x4c, 0x0, 0x0}) 01:48:30 executing program 4: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4b49, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:30 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x4000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:30 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}) [ 681.047831] binder: 923:926 unknown command 536871360 [ 681.053360] binder: 923:926 ioctl c0306201 20000040 returned -22 [ 681.059506] binder: 925:932 unknown command 0 [ 681.059520] binder: 925:932 ioctl c0306201 20000040 returned -22 [ 681.076113] binder: 924:931 ioctl 4b49 20000040 returned -22 01:48:31 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x64c, 0x400, 0x258984b, 0x2, 0xe4a, r0}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x80000001, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:48:31 executing program 4 (fault-call:5 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)) [ 681.161324] binder: 923:947 unknown command 536871360 01:48:31 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[]}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 681.189780] binder: 923:947 ioctl c0306201 20000040 returned -22 01:48:31 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 01:48:31 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x4000000, 0x0, 0x0}) 01:48:31 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x1000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 681.306766] FAULT_INJECTION: forcing a failure. [ 681.306766] name failslab, interval 1, probability 0, space 0, times 0 01:48:31 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 681.349686] CPU: 1 PID: 964 Comm: syz-executor4 Not tainted 4.20.0-rc6+ #151 [ 681.354924] binder: 973:974 unknown command 536871360 [ 681.356904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.356938] Call Trace: [ 681.356966] dump_stack+0x244/0x39d [ 681.357006] ? dump_stack_print_info.cold.1+0x20/0x20 [ 681.357036] should_fail.cold.4+0xa/0x17 [ 681.357059] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 681.357087] ? zap_class+0x640/0x640 01:48:31 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 681.357104] ? __mutex_lock+0x85e/0x16f0 [ 681.357123] ? kvm_vm_ioctl_unregister_coalesced_mmio+0x33/0x330 [ 681.357142] ? find_held_lock+0x36/0x1c0 [ 681.357161] ? __lock_is_held+0xb5/0x140 [ 681.357192] ? perf_trace_sched_process_exec+0x860/0x860 [ 681.357205] ? zap_class+0x640/0x640 [ 681.357231] ? zap_class+0x640/0x640 [ 681.357246] ? zap_class+0x640/0x640 [ 681.357266] __should_failslab+0x124/0x180 [ 681.357282] should_failslab+0x9/0x14 [ 681.357296] __kmalloc+0x2e0/0x760 [ 681.357309] ? __lock_is_held+0xb5/0x140 01:48:31 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x6000, 0x0, 0x0}) [ 681.357326] ? kvm_io_bus_unregister_dev+0x29f/0x549 [ 681.357344] kvm_io_bus_unregister_dev+0x29f/0x549 [ 681.357360] ? kvm_io_bus_register_dev+0x960/0x960 [ 681.357372] ? lock_downgrade+0x900/0x900 [ 681.357389] ? lock_release+0xa00/0xa00 [ 681.374201] binder: 973:974 ioctl c0306201 20000040 returned -22 [ 681.374490] ? perf_trace_sched_process_exec+0x860/0x860 [ 681.374527] ? __lock_acquire+0x62f/0x4c20 [ 681.374546] ? lock_downgrade+0x900/0x900 [ 681.402421] binder: 973:981 unknown command 536871360 01:48:31 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 681.406456] kvm_vm_ioctl_unregister_coalesced_mmio+0x20f/0x330 [ 681.406484] kvm_vm_ioctl+0x6bc/0x1d60 [ 681.406501] ? dput.part.25+0x26d/0x860 [ 681.406528] ? kvm_set_memory_region+0x50/0x50 [ 681.406542] ? zap_class+0x640/0x640 [ 681.406567] ? find_held_lock+0x36/0x1c0 [ 681.417358] binder: 973:981 ioctl c0306201 20000040 returned -22 [ 681.420203] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 681.420221] ? _parse_integer+0x134/0x180 [ 681.420241] ? zap_class+0x640/0x640 [ 681.420259] ? zap_class+0x640/0x640 [ 681.420276] ? _parse_integer+0x180/0x180 01:48:31 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 681.420295] ? zap_class+0x640/0x640 [ 681.548598] binder: 985:986 unknown command 536871360 [ 681.548968] ? lock_release+0xa00/0xa00 [ 681.548985] ? perf_trace_sched_process_exec+0x860/0x860 [ 681.549010] ? find_held_lock+0x36/0x1c0 [ 681.549052] ? __fget+0x4aa/0x740 [ 681.549069] ? lock_downgrade+0x900/0x900 [ 681.561090] binder: 985:986 ioctl c0306201 20000040 returned -22 [ 681.561959] ? check_preemption_disabled+0x48/0x280 [ 681.562000] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 681.562017] ? kasan_check_read+0x11/0x20 [ 681.562033] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 681.562048] ? rcu_softirq_qs+0x20/0x20 [ 681.562075] ? __fget+0x4d1/0x740 [ 681.562098] ? ksys_dup3+0x680/0x680 [ 681.562125] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 681.562149] ? kvm_set_memory_region+0x50/0x50 [ 681.562167] do_vfs_ioctl+0x1de/0x1790 [ 681.592218] binder: 985:989 unknown command 536871360 [ 681.595591] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 681.595613] ? ioctl_preallocate+0x300/0x300 [ 681.595635] ? selinux_file_mprotect+0x620/0x620 01:48:31 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x6c, 0x0, 0x0}) [ 681.595659] ? __sb_end_write+0xd9/0x110 [ 681.595677] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 681.595694] ? fput+0x130/0x1a0 [ 681.605669] binder: 985:989 ioctl c0306201 20000040 returned -22 [ 681.609050] ? do_syscall_64+0x9a/0x820 [ 681.609073] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 681.609089] ? security_file_ioctl+0x94/0xc0 [ 681.609107] ksys_ioctl+0xa9/0xd0 [ 681.609126] __x64_sys_ioctl+0x73/0xb0 [ 681.689526] do_syscall_64+0x1b9/0x820 [ 681.693508] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 681.696163] binder: 992:993 unknown command 536871360 [ 681.698900] ? syscall_return_slowpath+0x5e0/0x5e0 [ 681.698914] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 681.698935] ? trace_hardirqs_on_caller+0x310/0x310 [ 681.698950] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 681.698966] ? prepare_exit_to_usermode+0x291/0x3b0 [ 681.698991] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 681.704494] binder: 992:993 ioctl c0306201 20000040 returned -22 [ 681.709094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 681.709108] RIP: 0033:0x457679 [ 681.709123] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 681.709132] RSP: 002b:00007f9df6bccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 681.709147] RAX: ffffffffffffffda RBX: 00007f9df6bccc90 RCX: 0000000000457679 [ 681.709156] RDX: 00000000200000c0 RSI: 000000004010ae68 RDI: 0000000000000006 [ 681.709165] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 01:48:31 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x55) gettid() clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x109000, 0x0) close(r2) tkill(r1, 0xe) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) ptrace$cont(0x2000000018, r1, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x20000) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) write$P9_RLCREATE(r3, &(0x7f00000001c0)={0x18, 0xf, 0x2, {{0x10, 0x3, 0x4}}}, 0x18) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 01:48:31 executing program 4 (fault-call:5 fault-nth:1): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)) 01:48:31 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 681.709174] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9df6bcd6d4 [ 681.709182] R13: 00000000004c9180 R14: 00000000004d1930 R15: 0000000000000007 [ 681.719626] kvm: failed to shrink bus, removing it completely [ 681.753938] binder: 992:996 unknown command 536871360 [ 681.825976] binder: 992:996 ioctl c0306201 20000040 returned -22 01:48:31 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}) 01:48:31 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:31 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x74, 0x0, 0x0}) 01:48:31 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 681.963671] binder: 1009:1010 unknown command 0 01:48:31 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) [ 681.995828] binder: 1009:1010 ioctl c0306201 20000040 returned -22 [ 682.016952] binder: 1009:1036 unknown command 0 [ 682.027480] binder: 1015:1028 unknown command 536871360 [ 682.038937] binder: 1009:1036 ioctl c0306201 20000040 returned -22 [ 682.053350] binder: 1015:1028 ioctl c0306201 20000040 returned -22 [ 682.083022] binder: 1015:1044 unknown command 536871360 01:48:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)) 01:48:32 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 01:48:32 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b000000080005"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:32 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x5000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 682.110653] binder: 1015:1044 ioctl c0306201 20000040 returned -22 01:48:34 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000001c0)={0x80003, 0x0, [0x7, 0x0, 0x2, 0xffff, 0x6, 0x3, 0x400, 0x4]}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x10000420) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000140)=0x20007) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:48:34 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x2000000, 0x0, 0x0}) 01:48:34 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x3f00, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:34 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}) 01:48:34 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b000000080005"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x80087601, &(0x7f00000000c0)) 01:48:34 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2002) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x101, 0x4, 0x1, 0x0, 0x0, 0x6, 0x120, 0x7, 0x8000, 0x4, 0x6, 0x588710a4, 0x8000, 0x8, 0x80000000, 0x9, 0x8ed4, 0x5, 0x8, 0x100000000, 0x1f, 0xfff, 0x6, 0x4, 0xef, 0x4, 0x2, 0xbcda, 0x7, 0x200, 0x9046, 0x6, 0x800, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x2, 0x27, 0xf06, 0x6, 0x9, 0x0, 0x7}, r0, 0xffffffffffffffff, r1, 0x9) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:48:34 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x74, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:35 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b000000080005"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 685.052009] binder: 1080:1082 unknown command 536871360 [ 685.077243] binder: 1080:1082 ioctl c0306201 20000040 returned -22 01:48:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae42, &(0x7f00000000c0)) 01:48:35 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}) [ 685.141024] binder: 1080:1104 unknown command 536871360 [ 685.165682] binder: 1080:1104 ioctl c0306201 20000040 returned -22 01:48:35 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x3000000, 0x0}) 01:48:35 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x6000000000000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:35 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b000000080005000200"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:35 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]}) 01:48:35 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x14, r0, 0x0, 0x81) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:48:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0xc00caee0, &(0x7f00000000c0)) [ 685.409075] binder: 1127:1132 unknown command 536871360 [ 685.414781] binder: 1127:1132 ioctl c0306201 20000040 returned -22 01:48:35 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b000000080005000200"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:35 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}) 01:48:35 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x3f000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 685.507006] binder: 1127:1163 unknown command 536871360 01:48:35 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x8, 0x40200) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000380)) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x2000000000018, r0, 0x0, 0xfffffffffffffffd) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x70, 0x6, 0x5, 0x9, 0x8, 0x0, 0xee58, 0x4004, 0x8, 0x2, 0xfffffffffffffffc, 0xffffffffffffffff, 0xe8d, 0x2, 0x2, 0x2, 0xff, 0x719, 0x9, 0xffffffffffffff01, 0x6, 0x6, 0x3, 0x100000000, 0x0, 0x0, 0x3, 0x4, 0x8, 0xb, 0xc, 0x4, 0x800000000000, 0x7fff, 0x1ff, 0x3f, 0x69, 0x0, 0x9, 0x4, @perf_config_ext={0xee4a, 0xffffffffffffffff}, 0x0, 0xd4b, 0x2, 0x7, 0x40, 0x31, 0xfffffffffffff801}, 0xffffffffffffff9c, 0x3, 0xffffffffffffff9c, 0x4) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x2000, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000300)={[], 0x0, 0x7, 0x7fffffff, 0x0, 0xffff, r0}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x0, 0x4, 0x4abd, 0x5, 0x0, 0x3b8f, 0x10, 0xb, 0xfff, 0x1, 0x4c61, 0xffff, 0x7, 0xcc, 0x6, 0x7, 0x6, 0x26b8, 0x2, 0x6, 0x5, 0x3ff, 0x10000, 0x4, 0x7, 0x0, 0x0, 0x7, 0x80000000, 0x3ff, 0x1, 0x1f, 0x1, 0x2, 0xfff, 0x0, 0x0, 0x3, 0x6, @perf_bp={&(0x7f0000000040), 0x1}, 0x20240, 0x7, 0x3, 0xf, 0x7f, 0x696}, r0, 0x0, r2, 0x8) ptrace$peekuser(0x3, r0, 0x2) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 685.551350] binder: 1127:1163 ioctl c0306201 20000040 returned -22 01:48:35 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b000000080005000200"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0xc0189436, &(0x7f00000000c0)) 01:48:35 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x6000000000000000, 0x0}) 01:48:35 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}) 01:48:35 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x2000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:35 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b00000008000500020000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:35 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]}) [ 685.823297] binder: 1193:1198 unknown command 536871360 [ 685.835705] binder: 1193:1198 ioctl c0306201 20000040 returned -22 01:48:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4020aea5, &(0x7f00000000c0)) [ 685.863646] binder: 1193:1211 unknown command 536871360 [ 685.879483] binder: 1193:1211 ioctl c0306201 20000040 returned -22 01:48:35 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x7000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:35 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 01:48:35 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b00000008000500020000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:38 executing program 0: clone(0x3102021ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x280200, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000140)={&(0x7f0000000080)=[0x8], 0x1, 0x8, 0x1, 0x5, 0x9, 0x7ff, {0x81, 0x5, 0x0, 0x7, 0x2, 0x2, 0x0, 0x7ff, 0x100000001, 0x1000, 0x5, 0x0, 0x2, 0x5, "ed955eec38cbd05446eb906e631d76793b9ad250f6e63659d457f02ee475acaa"}}) write$FUSE_INIT(r1, &(0x7f00000001c0)={0x50, 0x0, 0x3, {0x7, 0x1c, 0x2d, 0x2, 0x8000, 0x2, 0x7, 0x10000}}, 0x50) 01:48:38 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x300, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0xae03, &(0x7f00000000c0)) 01:48:38 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x4c000000, 0x0}) 01:48:38 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b00000008000500020000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:38 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}) 01:48:38 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 688.807248] binder: 1254:1256 unknown command 536871360 01:48:38 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x8001, 0x2) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f00000001c0)=0x1, 0x4) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) futex(&(0x7f0000000040)=0x1, 0x87, 0x0, &(0x7f0000000080), &(0x7f0000000140)=0x1, 0x1) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 688.853904] binder: 1254:1256 ioctl c0306201 20000040 returned -22 01:48:38 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) [ 688.949594] binder: 1254:1277 unknown command 536871360 [ 688.955009] binder: 1254:1277 ioctl c0306201 20000040 returned -22 01:48:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0xc0045878, &(0x7f00000000c0)) 01:48:38 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:38 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x4c00, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:38 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x600, 0x0}) 01:48:39 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}) 01:48:39 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x4c, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:39 executing program 0: r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f0000000200)=@nfc, &(0x7f0000000280)=0x80) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r2, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x8000) tkill(r0, 0xf) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x9, 0x3, 0x1000, 0x10000, 0xffff, 0x6b3, 0x800, 0x7}, &(0x7f0000000080)={0x800, 0x4, 0x3, 0x27, 0x2, 0x1, 0x4, 0x1abcbf5c}, &(0x7f0000000140)={0x80, 0x81, 0x5, 0x80, 0x4f1, 0x80, 0x80000000, 0xffffffffffff0000}, &(0x7f00000001c0)={r3, r4/1000+30000}) 01:48:39 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4008ae61, &(0x7f00000000c0)) 01:48:39 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x330f000000000000]}) [ 689.250617] binder: 1303:1304 unknown command 536871360 [ 689.284815] binder: 1303:1304 ioctl c0306201 20000040 returned -22 01:48:39 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x600000000000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 689.344638] binder: 1303:1326 unknown command 536871360 [ 689.366824] binder: 1303:1326 ioctl c0306201 20000040 returned -22 01:48:39 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2846014a15007cce, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000080)=0xfffffffffffffe0a) 01:48:39 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 01:48:39 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:39 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x7, 0x0}) 01:48:39 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x7a00000000000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:39 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]}) 01:48:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x541b, &(0x7f00000000c0)) 01:48:39 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x2) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000080)={0xf002, 0x0, 0x3ff, 0x2, 0x2}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 689.622160] binder: 1351:1354 unknown command 536871360 [ 689.657694] binder: 1351:1354 ioctl c0306201 20000040 returned -22 01:48:39 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 689.692015] binder: 1351:1370 unknown command 536871360 [ 689.698962] binder: 1351:1370 ioctl c0306201 20000040 returned -22 01:48:39 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x6c000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:39 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x6c, 0x0}) 01:48:39 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 01:48:39 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0xc0045878, &(0x7f00000000c0)) 01:48:39 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x60000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:39 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 689.959785] binder: 1395:1401 unknown command 536871360 [ 689.986959] binder: 1395:1401 ioctl c0306201 20000040 returned -22 01:48:39 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33]}) [ 690.031292] binder: 1395:1410 unknown command 536871360 [ 690.063955] binder: 1395:1410 ioctl c0306201 20000040 returned -22 01:48:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0xc020660b, &(0x7f00000000c0)) 01:48:40 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x1000000, 0x0}) [ 690.254612] binder: 1428:1429 unknown command 536871360 [ 690.277055] binder: 1428:1429 ioctl c0306201 20000040 returned -22 [ 690.306964] binder: 1428:1434 unknown command 536871360 [ 690.323487] binder: 1428:1434 ioctl c0306201 20000040 returned -22 01:48:42 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:48:42 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:42 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 01:48:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x40087602, &(0x7f00000000c0)) 01:48:42 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x300000000000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:42 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x300, 0x0}) [ 692.877302] binder: 1440:1444 unknown command 536871360 [ 692.896846] binder: 1440:1444 ioctl c0306201 20000040 returned -22 01:48:42 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4040ae79, &(0x7f00000000c0)) [ 692.938730] binder: 1440:1455 unknown command 536871360 [ 692.944140] binder: 1440:1455 ioctl c0306201 20000040 returned -22 01:48:42 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x3f00000000000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:42 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x4c, 0x0}) 01:48:42 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) io_setup(0x200, &(0x7f00000002c0)) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={[], 0x2, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:48:42 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}) 01:48:43 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 693.140828] binder: 1469:1474 unknown command 536871360 01:48:43 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x74000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 693.182154] binder: 1469:1474 ioctl c0306201 20000040 returned -22 [ 693.214907] binder: 1469:1487 unknown command 536871360 [ 693.228817] binder: 1469:1487 ioctl c0306201 20000040 returned -22 01:48:43 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) 01:48:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4b47, &(0x7f00000000c0)) 01:48:43 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:43 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000380)=0x10020) 01:48:43 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x60, 0x0}) 01:48:43 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x7a000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4020940d, &(0x7f00000000c0)) 01:48:43 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 693.544842] binder: 1510:1511 unknown command 536871360 [ 693.566278] binder: 1510:1511 ioctl c0306201 20000040 returned -22 01:48:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r1 = dup(r0) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) ioctl$BLKDISCARD(r1, 0x1277, 0x0) shutdown(r2, 0x0) 01:48:43 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x7a, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:43 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 693.623012] binder: 1510:1541 unknown command 536871360 [ 693.652996] binder: 1510:1541 ioctl c0306201 20000040 returned -22 01:48:43 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:43 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x4800000000000000, 0x0}) 01:48:43 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:43 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x500000000000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)) [ 693.819989] binder: 1557:1563 unknown command 536871360 01:48:43 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}) [ 693.863122] binder: 1557:1563 ioctl c0306201 20000040 returned -22 [ 693.913364] binder: 1557:1574 unknown command 536871360 [ 693.940584] binder: 1557:1574 ioctl c0306201 20000040 returned -22 01:48:43 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:43 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x200000000000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:43 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x6000, 0x0}) [ 694.170191] binder: 1597:1600 unknown command 536871360 [ 694.178793] binder: 1597:1600 ioctl c0306201 20000040 returned -22 [ 694.191111] binder: 1597:1603 unknown command 536871360 [ 694.197872] binder: 1597:1603 ioctl c0306201 20000040 returned -22 01:48:44 executing program 0: mkdir(&(0x7f0000004080)='./file0\x00', 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::d:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 01:48:44 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 01:48:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x2, &(0x7f00000000c0)) 01:48:44 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:44 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x48000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:44 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x68, 0x0}) 01:48:44 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:44 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x60, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:44 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 01:48:44 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 694.678672] binder: 1615:1622 unknown command 536871360 [ 694.686645] binder: 1615:1622 ioctl c0306201 20000040 returned -22 [ 694.701422] libceph: parse_ips bad ip '[d::d' [ 694.715882] libceph: parse_ips bad ip '[d::d' [ 694.722118] binder: 1615:1630 unknown command 536871360 [ 694.776835] binder: 1615:1630 ioctl c0306201 20000040 returned -22 01:48:44 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x300000000000000, 0x0}) 01:48:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x5451, &(0x7f00000000c0)) 01:48:44 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000022ff0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0) 01:48:44 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:44 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x48, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:44 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x330f]}) [ 694.990645] binder: 1656:1663 unknown command 536871360 [ 695.008195] binder: 1656:1663 ioctl c0306201 20000040 returned -22 01:48:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x80086601, &(0x7f00000000c0)) 01:48:45 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) [ 695.062812] binder: 1656:1675 unknown command 536871360 [ 695.099816] binder: 1656:1675 ioctl c0306201 20000040 returned -22 01:48:45 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:45 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x7000000, 0x0}) 01:48:45 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x6000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:45 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) 01:48:45 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4020ae76, &(0x7f00000000c0)) [ 695.316879] binder: 1698:1699 unknown command 536871360 [ 695.322470] binder: 1698:1699 ioctl c0306201 20000040 returned -22 [ 695.371119] binder: 1698:1710 unknown command 536871360 [ 695.396935] binder: 1698:1710 ioctl c0306201 20000040 returned -22 01:48:45 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x4c000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:45 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:45 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x6000000, 0x0}) 01:48:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x5460, &(0x7f00000000c0)) 01:48:45 executing program 0: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) 01:48:45 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]}) 01:48:45 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 695.841183] binder: 1721:1726 unknown command 536871360 [ 695.863855] binder: 1721:1726 ioctl c0306201 20000040 returned -22 01:48:45 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x600, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 695.908516] binder: 1721:1735 unknown command 536871360 01:48:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4008ae6a, &(0x7f00000000c0)) 01:48:45 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 695.954301] binder: 1721:1735 ioctl c0306201 20000040 returned -22 01:48:45 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x7400, 0x0}) 01:48:45 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x2, 0x28021) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) write$evdev(r0, &(0x7f0000000040)=[{}, {{0x0, 0x7530}}], 0xff3e) 01:48:46 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x4c00000000000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:46 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 696.157698] binder: 1751:1754 unknown command 536871360 [ 696.170870] IPVS: ftp: loaded support on port[0] = 21 [ 696.176671] binder: 1751:1754 ioctl c0306201 20000040 returned -22 01:48:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x5450, &(0x7f00000000c0)) 01:48:46 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:46 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x68000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 696.240848] binder: 1751:1766 unknown command 536871360 [ 696.248477] binder: 1751:1766 ioctl c0306201 20000040 returned -22 [ 696.319485] device bridge_slave_1 left promiscuous mode [ 696.324992] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.370133] device bridge_slave_0 left promiscuous mode [ 696.379436] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.477571] team0 (unregistering): Port device team_slave_1 removed [ 696.488887] team0 (unregistering): Port device team_slave_0 removed [ 696.498762] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 696.549270] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 696.604768] bond0 (unregistering): Released all slaves [ 697.245976] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.252403] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.259920] device bridge_slave_0 entered promiscuous mode [ 697.301595] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.308192] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.315926] device bridge_slave_1 entered promiscuous mode [ 697.355709] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 697.395990] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 697.518944] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 697.562263] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 697.752178] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 697.759667] team0: Port device team_slave_0 added [ 697.789559] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 697.796940] team0: Port device team_slave_1 added [ 697.823067] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 697.830157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 697.839237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 697.872163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 697.914048] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 697.921272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 697.936191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 697.956370] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 697.963372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 697.972282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 698.242520] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.248928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.255597] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.262117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.269372] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 698.755727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 699.154135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.239068] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 699.322407] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 699.328887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 699.336001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 699.420766] 8021q: adding VLAN 0 to HW filter on device team0 01:48:49 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) 01:48:49 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x4, 0x0}) 01:48:49 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 01:48:49 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x700000000000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x40049409, &(0x7f00000000c0)) [ 699.987497] binder: 2047:2049 unknown command 536871360 [ 699.994524] binder: 2047:2049 ioctl c0306201 20000040 returned -22 01:48:49 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x330f0000]}) 01:48:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000080)) [ 700.039248] binder: 2047:2068 unknown command 536871360 01:48:49 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:49 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x7a00, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:50 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x7a, 0x0}) [ 700.091978] binder: 2047:2068 ioctl c0306201 20000040 returned -22 01:48:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0xae41, &(0x7f00000000c0)) 01:48:50 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') 01:48:50 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x6, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 700.230405] binder: 2079:2088 unknown command 536871360 [ 700.254664] binder: 2079:2088 ioctl c0306201 20000040 returned -22 [ 700.274834] binder: 2079:2091 unknown command 536871360 01:48:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(0x0, 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 700.301070] binder: 2079:2091 ioctl c0306201 20000040 returned -22 01:48:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0xc008ae67, &(0x7f00000000c0)) 01:48:50 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}) 01:48:50 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0xffffff7f00000000, 0x0}) [ 700.413609] binder: 2104:2108 unknown command 0 01:48:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(0x0, 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:50 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) shutdown(r2, 0x0) connect$unix(r0, &(0x7f00000012c0)=@file={0x1, "e91f7189591e9233614b00"}, 0x11) r3 = accept(r1, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000080)="03", 0x1, 0xc840, 0x0, 0x0) [ 700.456506] binder: 2104:2108 ioctl c0306201 20000040 returned -22 [ 700.488227] binder: 2116:2118 unknown command 536871360 [ 700.534520] binder: 2116:2118 ioctl c0306201 20000040 returned -22 01:48:50 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 01:48:50 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x7400000000000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4b49, &(0x7f00000000c0)) [ 700.575765] binder: 2116:2131 unknown command 536871360 [ 700.614248] binder: 2116:2131 ioctl c0306201 20000040 returned -22 01:48:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(0x0, 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:50 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x6c000000, 0x0}) 01:48:50 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}) 01:48:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'lo\x00', 0x11}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)="6c6f00966fd651b159a9c84a2c60d29800000020") 01:48:50 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x2000000000000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 700.839701] binder: 2155:2156 unknown command 536871360 [ 700.845327] binder: 2155:2156 ioctl c0306201 20000040 returned -22 01:48:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x40086602, &(0x7f00000000c0)) [ 700.883525] binder: 2155:2169 unknown command 536871360 01:48:50 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x0, 0xfff}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 700.932650] binder: 2155:2169 ioctl c0306201 20000040 returned -22 01:48:50 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0xffffff7f00000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:50 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) 01:48:50 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x4800, 0x0}) 01:48:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:51 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 01:48:51 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x5421, &(0x7f00000000c0)) [ 701.151949] binder: 2191:2200 unknown command 536871360 [ 701.169542] binder: 2191:2200 ioctl c0306201 20000040 returned -22 01:48:51 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x7, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 701.230221] binder: 2191:2212 unknown command 536871360 [ 701.261905] binder: 2191:2212 ioctl c0306201 20000040 returned -22 01:48:51 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 01:48:51 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x3, 0x0}) 01:48:51 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(0xffffffffffffffff, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 701.381417] binder: 2218:2226 unknown command 0 [ 701.406121] binder: 2218:2226 ioctl c0306201 20000040 returned -22 [ 701.484345] binder: 2230:2238 unknown command 536871360 [ 701.501437] binder: 2230:2238 ioctl c0306201 20000040 returned -22 [ 701.521457] binder: 2230:2240 unknown command 536871360 [ 701.532575] binder: 2230:2240 ioctl c0306201 20000040 returned -22 01:48:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000000009cc48090bc9dcdd56f898b2abdf4a129000000"], 0x1}}, 0x0) clock_gettime(0x0, &(0x7f00000047c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000340)=""/48, 0x30}, {&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000000480)=""/223, 0xdf}, {&(0x7f0000000580)=""/252, 0xfc}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/236, 0xec}, {&(0x7f0000001780)=""/248, 0xf8}, {&(0x7f0000001880)=""/84, 0x54}, {&(0x7f0000001900)=""/1, 0x1}, {&(0x7f0000001940)=""/118, 0x76}], 0xa, &(0x7f0000001a80)=""/173, 0xad}, 0x7f}, {{&(0x7f0000001b40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001bc0)=""/183, 0xb7}, {&(0x7f0000001c80)=""/164, 0xa4}], 0x2, &(0x7f0000001d80)=""/172, 0xac}, 0x10001}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001e40)=""/139, 0x8b}, {&(0x7f0000001f00)=""/222, 0xde}, {&(0x7f0000002000)=""/198, 0xc6}], 0x3, &(0x7f0000002140)=""/172, 0xac}, 0x7}, {{&(0x7f0000002200)=@sco, 0x80, &(0x7f0000004380)=[{&(0x7f0000002280)=""/235, 0xeb}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/4096, 0x1000}], 0x3}, 0xe122}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f00000043c0)=""/60, 0x3c}, {&(0x7f0000004400)=""/178, 0xb2}, {&(0x7f00000044c0)}, {&(0x7f0000004500)=""/214, 0xd6}], 0x4, &(0x7f0000004640)=""/38, 0x26}, 0x800}], 0x5, 0x22, &(0x7f0000004800)={r1, r2+10000000}) 01:48:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x5452, &(0x7f00000000c0)) 01:48:51 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x6c, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:51 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(0xffffffffffffffff, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:51 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x6800000000000000, 0x0}) 01:48:51 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]}) 01:48:51 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}) [ 701.807394] binder: 2252:2253 unknown command 536871360 [ 701.818986] binder: 2252:2253 ioctl c0306201 20000040 returned -22 01:48:51 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(0xffffffffffffffff, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:51 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x4800, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 701.861367] binder: 2252:2265 unknown command 536871360 [ 701.890626] binder: 2252:2265 ioctl c0306201 20000040 returned -22 01:48:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4020ae46, &(0x7f00000000c0)) 01:48:51 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x7a000000, 0x0}) 01:48:51 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 702.049640] binder: 2280:2282 unknown command 536871360 [ 702.086339] binder: 2280:2282 ioctl c0306201 20000040 returned -22 [ 702.130548] binder: 2280:2293 unknown command 536871360 [ 702.150560] binder: 2280:2293 ioctl c0306201 20000040 returned -22 01:48:52 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 01:48:52 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x100000000000000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) 01:48:52 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x47, 0x1}, 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) getpid() 01:48:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0xffff8000}) 01:48:52 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x74, 0x0}) 01:48:52 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:53 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:53 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}) [ 703.096100] binder: 2303:2305 unknown command 536871360 [ 703.101858] binder: 2303:2305 ioctl c0306201 20000040 returned -22 01:48:53 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x2000, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x0, 0x0}) [ 703.170161] binder: 2303:2324 unknown command 536871360 [ 703.197503] binder: 2303:2324 ioctl c0306201 20000040 returned -22 01:48:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0xfffffdfd}) 01:48:53 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x6c00000000000000, 0x0}) 01:48:53 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]}) 01:48:53 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:53 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0400000000100000"]], 0x0, 0x0, 0x0}) [ 703.479792] binder: 2342:2348 unknown command 536871360 [ 703.507400] binder: 2342:2348 ioctl c0306201 20000040 returned -22 [ 703.555917] binder: 2342:2358 unknown command 536871360 [ 703.561620] binder: 2342:2358 ioctl c0306201 20000040 returned -22 [ 703.613144] binder: 2361:2363 unknown command 536871360 [ 703.648023] binder: 2361:2363 ioctl c0306201 20000040 returned -22 01:48:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x47, 0x1}, 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) getpid() 01:48:53 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 01:48:53 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0x1000000000000}) 01:48:53 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x48000000, 0x0}) 01:48:53 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="7400000000100000"]], 0x0, 0x0, 0x0}) 01:48:53 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}) [ 703.799027] binder: 2370:2375 unknown command 536871360 01:48:53 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 703.840177] binder: 2372:2387 unknown command 536871360 [ 703.849865] binder: 2370:2375 ioctl c0306201 20000040 returned -22 [ 703.860137] binder: 2372:2387 ioctl c0306201 20000040 returned -22 01:48:53 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x2, 0x0}) [ 703.899067] binder: 2372:2393 unknown command 536871360 [ 703.908464] binder: 2372:2393 ioctl c0306201 20000040 returned -22 01:48:53 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000006800100000"]], 0x0, 0x0, 0x0}) 01:48:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0xfdfdffff00000000}) 01:48:53 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}) [ 704.097929] binder: 2409:2413 unknown command 536871360 [ 704.103495] binder: 2409:2413 ioctl c0306201 20000040 returned -22 [ 704.103778] binder: 2411:2415 unknown command 536871360 [ 704.137381] binder: 2409:2418 unknown command 536871360 [ 704.156632] binder: 2411:2415 ioctl c0306201 20000040 returned -22 [ 704.176542] binder: 2409:2418 ioctl c0306201 20000040 returned -22 01:48:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0x80ffff00000000}) 01:48:54 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x47, 0x1}, 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) getpid() 01:48:54 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 01:48:54 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0048000000100000"]], 0x0, 0x0, 0x0}) 01:48:54 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x2000000000000000, 0x0}) 01:48:54 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}) 01:48:54 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 704.529017] binder: 2435:2446 unknown command 536871360 [ 704.543963] binder: 2434:2450 unknown command 536871360 [ 704.567900] binder: 2434:2450 ioctl c0306201 20000040 returned -22 [ 704.577582] binder: 2435:2446 ioctl c0306201 20000040 returned -22 [ 704.597816] binder: 2434:2456 unknown command 536871360 [ 704.603307] binder: 2434:2456 ioctl c0306201 20000040 returned -22 01:48:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0x80ffff}) [ 704.635147] binder: 2435:2461 unknown command 536871360 [ 704.656506] binder: 2435:2461 ioctl c0306201 20000040 returned -22 01:48:54 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:54 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000100000"]], 0x0, 0x0, 0x0}) 01:48:54 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x4c00, 0x0}) 01:48:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0xfdfdffff}) 01:48:54 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}) [ 704.927604] binder: 2483:2487 unknown command 536871360 [ 704.942124] binder: 2482:2486 unknown command 536871360 [ 704.975852] binder: 2483:2487 ioctl c0306201 20000040 returned -22 [ 704.983664] binder: 2482:2486 ioctl c0306201 20000040 returned -22 [ 705.042552] binder: 2483:2497 unknown command 536871360 [ 705.085362] binder: 2483:2497 ioctl c0306201 20000040 returned -22 01:48:55 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) 01:48:55 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x0, 0x0}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:55 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="6c00000000100000"]], 0x0, 0x0, 0x0}) 01:48:55 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x68000000, 0x0}) 01:48:55 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}) 01:48:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0x0, 0x80ffff00000000}) 01:48:55 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x0, 0x0}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 705.522865] binder: 2510:2519 unknown command 536871360 [ 705.530897] binder: 2513:2521 unknown command 536871360 [ 705.547158] binder: 2510:2519 ioctl c0306201 20000040 returned -22 [ 705.564678] binder: 2513:2521 ioctl c0306201 20000040 returned -22 01:48:55 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 01:48:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0x0, 0x1000000000000}) [ 705.605596] binder: 2513:2530 unknown command 536871360 01:48:55 executing program 0: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r0 = socket$inet6(0x18, 0x8001, 0x0) setsockopt(r0, 0x29, 0x2e, &(0x7f0000000000)="281984227ac9eb56b1ff10a280f81a521922fd9f", 0x14) 01:48:55 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000100100000"]], 0x0, 0x0, 0x0}) [ 705.698174] binder: 2513:2530 ioctl c0306201 20000040 returned -22 01:48:55 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x0, 0x0}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:55 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}) 01:48:55 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x4000000, 0x0}) 01:48:55 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000005c0)=')\\\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000101035b"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x800) 01:48:55 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x0, &(0x7f00000000c0)}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 705.896032] binder: 2542:2551 unknown command 536871360 [ 705.901596] binder: 2542:2551 ioctl c0306201 20000040 returned -22 [ 705.928576] binder: 2560:2561 unknown command 536871360 01:48:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0x0, 0xfdfdffff00000000}) 01:48:55 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]}) [ 705.953091] binder: 2560:2561 ioctl c0306201 20000040 returned -22 01:48:55 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 01:48:55 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x0, &(0x7f00000000c0)}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 706.011189] binder: 2560:2576 unknown command 536871360 [ 706.017719] binder: 2542:2557 unknown command 536871360 [ 706.031836] binder: 2560:2576 ioctl c0306201 20000040 returned -22 [ 706.045596] binder: 2542:2557 ioctl c0306201 20000040 returned -22 01:48:56 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x700000000000000, 0x0}) 01:48:56 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0060000000100000"]], 0x0, 0x0, 0x0}) 01:48:56 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x0, &(0x7f00000000c0)}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:56 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) [ 706.183011] binder: 2599:2600 unknown command 536871360 [ 706.196782] binder: 2599:2600 ioctl c0306201 20000040 returned -22 [ 706.229729] binder: 2599:2604 unknown command 536871360 [ 706.245550] binder: 2599:2604 ioctl c0306201 20000040 returned -22 [ 706.249605] binder: 2602:2605 unknown command 536871360 01:48:56 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:56 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x7a00000000000000, 0x0}) [ 706.282175] binder: 2602:2605 ioctl c0306201 20000040 returned -22 [ 706.403789] binder: 2617:2618 unknown command 536871360 [ 706.432986] binder: 2617:2618 ioctl c0306201 20000040 returned -22 [ 706.466736] binder: 2617:2621 unknown command 536871360 [ 706.472215] binder: 2617:2621 ioctl c0306201 20000040 returned -22 01:48:56 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000005c0)=')\\\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000101035b"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x800) 01:48:56 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="004c000000100000"]], 0x0, 0x0, 0x0}) 01:48:56 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0x0, 0xfdfdffff}) 01:48:56 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:56 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x500000000000000, 0x0}) 01:48:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) [ 706.615104] binder: 2625:2626 unknown command 536871360 [ 706.645579] binder: 2625:2626 ioctl c0306201 20000040 returned -22 01:48:56 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 706.692305] binder: 2629:2631 unknown command 536871360 [ 706.724760] binder: 2629:2631 ioctl c0306201 20000040 returned -22 [ 706.788383] binder: 2629:2640 unknown command 536871360 [ 706.821531] binder: 2629:2640 ioctl c0306201 20000040 returned -22 01:48:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000300)='posix_acl_access\x00', 0x0) write$FUSE_DIRENT(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="309c"], 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 01:48:56 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0300000000100000"]], 0x0, 0x0, 0x0}) [ 706.903381] binder: 2650:2652 unknown command 536871360 [ 706.921568] audit: type=1400 audit(1544665736.790:80): avc: denied { write } for pid=2651 comm="syz-executor0" name="fd" dev="proc" ino=181304 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 706.965908] binder: 2650:2652 ioctl c0306201 20000040 returned -22 [ 706.980312] audit: type=1400 audit(1544665736.790:81): avc: denied { add_name } for pid=2651 comm="syz-executor0" name=309C scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 707.013232] audit: type=1400 audit(1544665736.790:82): avc: denied { create } for pid=2651 comm="syz-executor0" name=309C scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 01:48:56 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 01:48:56 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 01:48:56 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0x0, 0x80ffff}) 01:48:56 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x6, 0x0}) 01:48:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES64, @ANYPTR64], &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='.@ppp0*+posix_acl_accesswlan0\x00', 0x4) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000140)={0x0}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udplite\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000200)={r1, 0x80000, r2}) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = msgget$private(0x0, 0x200) msgctl$IPC_INFO(r4, 0x3, &(0x7f0000000300)=""/100) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000240)={0x1, {{0x2, 0x4e22, @local}}}, 0x88) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x10) preadv(r5, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154}, {&(0x7f00000003c0)=""/68}, {&(0x7f00000005c0)=""/214}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/146}, {&(0x7f0000000880)=""/144}, {&(0x7f0000000480)=""/13}, {&(0x7f0000000940)=""/71}], 0x2a9, 0x0) 01:48:56 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000700100000"]], 0x0, 0x0, 0x0}) [ 707.160503] binder: 2668:2672 unknown command 536871360 [ 707.176874] binder: 2667:2673 unknown command 536871360 [ 707.197697] binder: 2667:2673 ioctl c0306201 20000040 returned -22 01:48:57 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 707.205014] binder: 2668:2672 ioctl c0306201 20000040 returned -22 01:48:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0x0, 0xffff8000}) [ 707.274335] binder: 2668:2678 unknown command 536871360 [ 707.288971] binder: 2668:2678 ioctl c0306201 20000040 returned -22 01:48:57 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x400000000000000, 0x0}) 01:48:57 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000006000100000"]], 0x0, 0x0, 0x0}) [ 707.379486] IPVS: ftp: loaded support on port[0] = 21 01:48:57 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 707.400125] binder: 2685:2689 unknown command 536871360 [ 707.422083] binder: 2685:2689 ioctl c0306201 20000040 returned -22 01:48:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0x0, 0xfffffdfd}) [ 707.487623] binder: 2685:2693 unknown command 536871360 [ 707.499985] binder: 2691:2695 unknown command 536871360 [ 707.514893] binder: 2691:2695 ioctl c0306201 20000040 returned -22 [ 707.523843] binder: 2685:2693 ioctl c0306201 20000040 returned -22 [ 707.655709] device bridge_slave_1 left promiscuous mode [ 707.661329] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.726506] device bridge_slave_0 left promiscuous mode [ 707.732025] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.793906] team0 (unregistering): Port device team_slave_1 removed [ 707.803382] team0 (unregistering): Port device team_slave_0 removed [ 707.813047] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 707.878431] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 707.963264] bond0 (unregistering): Released all slaves [ 708.458747] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.465279] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.473166] device bridge_slave_0 entered promiscuous mode [ 708.516336] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.522766] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.530484] device bridge_slave_1 entered promiscuous mode [ 708.571223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 708.613654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 708.741245] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 708.786184] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 708.983658] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 708.991136] team0: Port device team_slave_0 added [ 709.032950] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 709.040726] team0: Port device team_slave_1 added [ 709.080969] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 709.087870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 709.096012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 709.131423] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 709.138308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 709.149280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 709.175350] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 709.182486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 709.191715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 709.215986] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 709.223001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 709.234705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 709.547307] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.553758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.560394] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.566839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.574101] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 710.125573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 710.476789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.566168] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 710.651194] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 710.657418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 710.664338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 710.756237] 8021q: adding VLAN 0 to HW filter on device team0 01:49:01 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x330f000000000000]}) 01:49:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES64, @ANYPTR64], &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='.@ppp0*+posix_acl_accesswlan0\x00', 0x4) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000140)={0x0}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udplite\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000200)={r1, 0x80000, r2}) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = msgget$private(0x0, 0x200) msgctl$IPC_INFO(r4, 0x3, &(0x7f0000000300)=""/100) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000240)={0x1, {{0x2, 0x4e22, @local}}}, 0x88) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x10) preadv(r5, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154}, {&(0x7f00000003c0)=""/68}, {&(0x7f00000005c0)=""/214}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/146}, {&(0x7f0000000880)=""/144}, {&(0x7f0000000480)=""/13}, {&(0x7f0000000940)=""/71}], 0x2a9, 0x0) 01:49:01 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe) 01:49:01 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000200100000"]], 0x0, 0x0, 0x0}) 01:49:01 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x7a00, 0x0}) 01:49:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0x0, 0x0, 0xffff8000}) [ 711.324734] binder: 2977:2981 unknown command 536871360 [ 711.333519] binder: 2977:2981 ioctl c0306201 20000040 returned -22 [ 711.344412] binder: 2979:2984 unknown command 536871360 01:49:01 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe) 01:49:01 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000400100000"]], 0x0, 0x0, 0x0}) [ 711.370512] binder: 2979:2984 ioctl c0306201 20000040 returned -22 [ 711.396313] ================================================================== [ 711.403941] BUG: KASAN: use-after-free in kvm_put_kvm+0xd7c/0xff0 [ 711.410184] Read of size 8 at addr ffff8881afc64690 by task syz-executor4/2980 [ 711.417641] [ 711.419278] CPU: 0 PID: 2980 Comm: syz-executor4 Not tainted 4.20.0-rc6+ #151 [ 711.426545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 711.426552] Call Trace: [ 711.426584] dump_stack+0x244/0x39d [ 711.426603] ? dump_stack_print_info.cold.1+0x20/0x20 [ 711.447334] ? printk+0xa7/0xcf [ 711.447349] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 711.447371] print_address_description.cold.7+0x9/0x1ff [ 711.447386] kasan_report.cold.8+0x242/0x309 [ 711.447401] ? kvm_put_kvm+0xd7c/0xff0 [ 711.447417] __asan_report_load8_noabort+0x14/0x20 [ 711.447432] kvm_put_kvm+0xd7c/0xff0 [ 711.477708] ? kvm_write_guest_cached+0x40/0x40 [ 711.482414] ? kvm_irqfd_release+0xd1/0x120 [ 711.486746] ? _raw_spin_unlock_irq+0x27/0x80 [ 711.489785] binder: 2991:2994 unknown command 536871360 [ 711.491322] ? _raw_spin_unlock_irq+0x27/0x80 [ 711.491406] ? ima_file_check+0x130/0x130 [ 711.491425] ? kvm_irqfd_release+0xdd/0x120 [ 711.508212] binder: 2991:2994 ioctl c0306201 20000040 returned -22 [ 711.509746] ? kvm_irqfd_release+0xdd/0x120 01:49:01 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe) 01:49:01 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000600100000"]], 0x0, 0x0, 0x0}) [ 711.509766] ? kvm_put_kvm+0xff0/0xff0 [ 711.509782] kvm_vm_release+0x42/0x50 [ 711.509799] __fput+0x385/0xa30 [ 711.509820] ? get_max_files+0x20/0x20 [ 711.509836] ? trace_hardirqs_on+0xbd/0x310 [ 711.509849] ? kasan_check_read+0x11/0x20 [ 711.509867] ? task_work_run+0x1af/0x2a0 [ 711.547793] ? trace_hardirqs_off_caller+0x310/0x310 [ 711.552905] ? filp_close+0x1cd/0x250 [ 711.556717] ____fput+0x15/0x20 [ 711.560001] task_work_run+0x1e8/0x2a0 [ 711.563899] ? task_work_cancel+0x240/0x240 [ 711.568226] ? copy_fd_bitmaps+0x210/0x210 [ 711.572503] ? do_syscall_64+0x9a/0x820 [ 711.576501] exit_to_usermode_loop+0x318/0x380 [ 711.576515] ? __bpf_trace_sys_exit+0x30/0x30 [ 711.576533] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 711.591133] do_syscall_64+0x6be/0x820 [ 711.591149] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 711.591166] ? syscall_return_slowpath+0x5e0/0x5e0 [ 711.591176] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 711.591194] ? trace_hardirqs_on_caller+0x310/0x310 [ 711.615354] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 711.620391] ? prepare_exit_to_usermode+0x291/0x3b0 [ 711.625430] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 711.630288] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 711.635478] RIP: 0033:0x411131 [ 711.637767] binder: 2998:3003 unknown command 536871360 [ 711.638670] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 711.638678] RSP: 002b:00007fff77f07080 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 01:49:01 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) [ 711.638691] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000411131 [ 711.638699] RDX: 0000000000000000 RSI: 0000000000730418 RDI: 0000000000000006 [ 711.638707] RBP: 0000000000000000 R08: 0000000000730410 R09: 0000000000000000 [ 711.638716] R10: 00007fff77f06fa0 R11: 0000000000000293 R12: 0000000000000000 [ 711.638724] R13: 0000000000000001 R14: 00000000000002f6 R15: 0000000000000004 [ 711.638750] [ 711.646829] binder: 2998:3003 ioctl c0306201 20000040 returned -22 [ 711.662999] Allocated by task 2983: [ 711.663015] save_stack+0x43/0xd0 [ 711.663028] kasan_kmalloc+0xc7/0xe0 [ 711.663040] kmem_cache_alloc_trace+0x152/0x750 [ 711.663053] kvm_vm_ioctl_register_coalesced_mmio+0xe8/0x4f0 [ 711.663066] kvm_vm_ioctl+0x594/0x1d60 [ 711.663077] do_vfs_ioctl+0x1de/0x1790 [ 711.663087] ksys_ioctl+0xa9/0xd0 [ 711.663097] __x64_sys_ioctl+0x73/0xb0 [ 711.663109] do_syscall_64+0x1b9/0x820 [ 711.663121] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 711.663125] [ 711.663138] Freed by task 2983: [ 711.700547] binder: 2979:3006 unknown command 536871360 01:49:01 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]}) 01:49:01 executing program 1: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0200000000100000"]], 0x0, 0x0, 0x0}) [ 711.707129] save_stack+0x43/0xd0 [ 711.707142] __kasan_slab_free+0x102/0x150 [ 711.707155] kasan_slab_free+0xe/0x10 [ 711.707165] kfree+0xcf/0x230 [ 711.707175] coalesced_mmio_destructor+0x1ad/0x2a0 [ 711.707191] kvm_vm_ioctl_unregister_coalesced_mmio+0x263/0x330 [ 711.716886] binder: 2979:3006 ioctl c0306201 20000040 returned -22 [ 711.718943] kvm_vm_ioctl+0x6bc/0x1d60 [ 711.718998] do_vfs_ioctl+0x1de/0x1790 [ 711.719012] ksys_ioctl+0xa9/0xd0 [ 711.771040] __x64_sys_ioctl+0x73/0xb0 [ 711.778694] do_syscall_64+0x1b9/0x820 [ 711.778708] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 711.778712] [ 711.778720] The buggy address belongs to the object at ffff8881afc64680 [ 711.778720] which belongs to the cache kmalloc-64 of size 64 [ 711.778733] The buggy address is located 16 bytes inside of [ 711.778733] 64-byte region [ffff8881afc64680, ffff8881afc646c0) [ 711.814156] The buggy address belongs to the page: [ 711.852862] page:ffffea0006bf1900 count:1 mapcount:0 mapping:ffff8881da800340 index:0xffff8881afc64a80 [ 711.852873] flags: 0x2fffc0000000200(slab) [ 711.852890] raw: 02fffc0000000200 ffffea0006bd2cc8 ffffea0006ea53c8 ffff8881da800340 [ 711.852905] raw: ffff8881afc64a80 ffff8881afc64000 000000010000001f 0000000000000000 [ 711.852910] page dumped because: kasan: bad access detected [ 711.852914] [ 711.852925] Memory state around the buggy address: [ 711.852940] ffff8881afc64580: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 711.852950] ffff8881afc64600: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 711.904553] binder: 3020:3025 unknown command 536871360 [ 711.906970] >ffff8881afc64680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 711.906976] ^ [ 711.906987] ffff8881afc64700: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 711.907010] ffff8881afc64780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 711.907015] ================================================================== [ 711.907019] Disabling lock debugging due to kernel taint [ 711.931542] Kernel panic - not syncing: panic_on_warn set ... [ 711.954869] kobject: 'loop3' (00000000fa368236): kobject_uevent_env [ 711.955774] CPU: 0 PID: 2980 Comm: syz-executor4 Tainted: G B 4.20.0-rc6+ #151 [ 711.955780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 711.955785] Call Trace: [ 711.955801] dump_stack+0x244/0x39d [ 711.955816] ? dump_stack_print_info.cold.1+0x20/0x20 [ 711.966971] kobject: 'loop3' (00000000fa368236): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 711.968648] panic+0x2ad/0x55c [ 711.968664] ? add_taint.cold.5+0x16/0x16 [ 711.974902] kobject: 'loop5' (000000005d980603): kobject_uevent_env [ 711.980920] ? preempt_schedule+0x4d/0x60 [ 711.980942] ? ___preempt_schedule+0x16/0x18 [ 711.980960] ? trace_hardirqs_on+0xb4/0x310 [ 711.990056] binder: 3020:3025 ioctl c0306201 20000040 returned -22 [ 711.998948] kasan_end_report+0x47/0x4f [ 711.998960] kasan_report.cold.8+0x76/0x309 [ 711.998975] ? kvm_put_kvm+0xd7c/0xff0 [ 711.998989] __asan_report_load8_noabort+0x14/0x20 [ 711.998999] kvm_put_kvm+0xd7c/0xff0 [ 711.999017] ? kvm_write_guest_cached+0x40/0x40 01:49:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES64, @ANYPTR64], &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='.@ppp0*+posix_acl_accesswlan0\x00', 0x4) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000140)={0x0}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udplite\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000200)={r1, 0x80000, r2}) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = msgget$private(0x0, 0x200) msgctl$IPC_INFO(r4, 0x3, &(0x7f0000000300)=""/100) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000240)={0x1, {{0x2, 0x4e22, @local}}}, 0x88) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x10) preadv(r5, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154}, {&(0x7f00000003c0)=""/68}, {&(0x7f00000005c0)=""/214}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/146}, {&(0x7f0000000880)=""/144}, {&(0x7f0000000480)=""/13}, {&(0x7f0000000940)=""/71}], 0x2a9, 0x0) 01:49:02 executing program 3: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000100000"]], 0x0, 0x5, 0x0}) 01:49:02 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xf33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 01:49:02 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$FUSE_ENTRY(r1, &(0x7f0000000800)={0x85, 0xfffffffffffffff5, 0x4, {0x4, 0x0, 0x4, 0x6, 0x2e7e, 0x5, {0x4, 0x6, 0x1b, 0x0, 0x5, 0x100000001, 0x3, 0x1, 0x55d2, 0x100000001, 0x5, 0x0, 0x0, 0x81, 0x40}}}, 0x2e6) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a052bbd7000fddbdf250b0000000800050002000035"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) [ 712.001986] kobject: 'loop5' (000000005d980603): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 712.005215] ? kvm_irqfd_release+0xd1/0x120 [ 712.005227] ? _raw_spin_unlock_irq+0x27/0x80 [ 712.005240] ? _raw_spin_unlock_irq+0x27/0x80 [ 712.018579] kobject: 'loop2' (00000000931fd058): kobject_uevent_env [ 712.019836] ? ima_file_check+0x130/0x130 [ 712.019856] ? kvm_irqfd_release+0xdd/0x120 [ 712.023102] kobject: 'loop2' (00000000931fd058): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 712.027156] ? kvm_irqfd_release+0xdd/0x120 [ 712.027171] ? kvm_put_kvm+0xff0/0xff0 [ 712.027184] kvm_vm_release+0x42/0x50 [ 712.027195] __fput+0x385/0xa30 [ 712.027210] ? get_max_files+0x20/0x20 [ 712.144440] ? trace_hardirqs_on+0xbd/0x310 [ 712.147262] kobject: 'loop0' (00000000a7c46082): kobject_uevent_env [ 712.148759] ? kasan_check_read+0x11/0x20 [ 712.148790] ? task_work_run+0x1af/0x2a0 [ 712.148819] ? trace_hardirqs_off_caller+0x310/0x310 [ 712.155211] kobject: 'loop0' (00000000a7c46082): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 712.159346] ? filp_close+0x1cd/0x250 [ 712.159361] ____fput+0x15/0x20 [ 712.159377] task_work_run+0x1e8/0x2a0 [ 712.188930] ? task_work_cancel+0x240/0x240 [ 712.188945] binder: 3039:3046 unknown command 536871360 [ 712.193252] ? copy_fd_bitmaps+0x210/0x210 [ 712.193266] ? do_syscall_64+0x9a/0x820 [ 712.193281] exit_to_usermode_loop+0x318/0x380 [ 712.193299] ? __bpf_trace_sys_exit+0x30/0x30 [ 712.212685] kobject: 'loop2' (00000000931fd058): kobject_uevent_env [ 712.215902] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 712.215940] do_syscall_64+0x6be/0x820 [ 712.231758] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 712.237126] ? syscall_return_slowpath+0x5e0/0x5e0 [ 712.238718] kobject: 'loop2' (00000000931fd058): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 712.242069] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 712.242083] ? trace_hardirqs_on_caller+0x310/0x310 [ 712.242099] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 712.256085] binder: 3039:3046 ioctl c0306201 20000040 returned -22 [ 712.256357] ? prepare_exit_to_usermode+0x291/0x3b0 [ 712.256375] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 712.256397] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 712.287696] RIP: 0033:0x411131 [ 712.291004] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 712.310023] RSP: 002b:00007fff77f07080 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 712.317729] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000411131 [ 712.324994] RDX: 0000000000000000 RSI: 0000000000730418 RDI: 0000000000000006 [ 712.332259] RBP: 0000000000000000 R08: 0000000000730410 R09: 0000000000000000 [ 712.339521] R10: 00007fff77f06fa0 R11: 0000000000000293 R12: 0000000000000000 [ 712.346792] R13: 0000000000000001 R14: 00000000000002f6 R15: 0000000000000004 [ 712.355483] Kernel Offset: disabled [ 712.359105] Rebooting in 86400 seconds..