000080 returned -22 21:50:56 executing program 0: 21:50:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000100043bd00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500e40b0002000800080088a8ffefcc72dcdf8e9c245ec9d2ae2b77055dfeeffa8b15b2707b2c5561f47ea585bf352d0361f6cd04785e40fc052361c51d2b8e1e3704e8d9bd4127463f1713e76f463a784d34019fa1527ea2fbfb80531d888cac97da20f34a4fe91a0899b410c8c9595f"], 0x3c}}, 0x0) 21:50:57 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x100, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="066304400300000011634840000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000786703da000013ab6f040a081e9200"/84], 0x0, 0x0, 0x0}) 21:50:57 executing program 0: 21:50:57 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x0, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) [ 1996.971477] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.2'. 21:50:57 executing program 0: 21:50:57 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e23, 0x400, @dev={0xfe, 0x80, [], 0x22}, 0x7}, {0xa, 0x4e22, 0x1, @local, 0x5}, 0x1000, [0x3f, 0x9, 0xa9c, 0xfff, 0x7, 0x5, 0x0, 0x7ff]}, 0x5c) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x7f) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) prctl$PR_GET_TSC(0x19, &(0x7f0000000280)) 21:50:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000100043bd00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080088a8ffffcd92efe4280222c300b4eab1a853569096770e2f3e442713340d1da5111ee30326f48df8ebc128ac170c8d0b648aa270c766edbbeeff8c246ef1d3ed420758bdc9291a156132ee97651242a8a42e71fe39703a48da394044944cd420eed9a3"], 0x3c}}, 0x0) 21:50:57 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x0, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) 21:50:57 executing program 0: 21:50:57 executing program 0: 21:50:57 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x0, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) 21:50:57 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000000c0)) ioctl$TCSETXW(r0, 0x5405, 0x0) keyctl$join(0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000900)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400000000000010010000280200000000000028020000f8030000f8030000f8030000f8030000f803000004000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="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"], 0x528) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f00000007c0)={0x2e1, 0x80000001, 0x3ff, 0xfff, [], [], [], 0x0, 0x4, 0x3da, 0x7, "8bfa4087994f257f3133dcd6544a5228"}) 21:50:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000100)=0x80000001) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:50:58 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, 0x0) r0 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(0x0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000280)="04", 0x1}]) 21:50:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\t', 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000840)=ANY=[@ANYBLOB]) sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r1, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) r2 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff0900", 0x40}], 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ef60c150d0292440c391714171"], 0x0, 0x0, 0x0}) 21:50:58 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, 0x0) r0 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(0x0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000280)="04", 0x1}]) 21:50:58 executing program 2: seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) getsockname(r2, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000140)=0x80) syz_open_procfs$namespace(r1, &(0x7f0000000180)='ns/mnt\x00') sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100043bd000000f621fb870100010000", @ANYRES32=r1, @ANYBLOB="00000000000000001c0012000c00010062726964008000001a80e30503000088a8ffff00"], 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000200)={r4, 0x6}) 21:50:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x880c0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) setsockopt$inet_buf(r5, 0x0, 0x9, &(0x7f0000000100)="d5743c9dcb2031ab58c63151144ca8e435769d0ebbcb18cb9ca0e737796685c9ab03baa9", 0x24) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="09631040020000000000000000000000000000000063404000000000000000000000000000000000000000001100"/72, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000000000852a62770101000001000000000000000000000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/24], @ANYBLOB="0563044002000000016340400200000000000000000000000000000000000000120000000000fa000000000000000000000022880b59f5b567ba0000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r4, @ANYBLOB="000000000000000000000000852a62770018000000000000000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000001780)=ANY=[@ANYBLOB='\x00'/4096], @ANYBLOB="000000000000000001000000000000000f00000000000000"], @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000000000000000000007fffffffffffffff"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:50:58 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, 0x0) r0 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(0x0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000280)="04", 0x1}]) 21:50:58 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000002c0)={0x6, 0x0, [{0x1, 0x6, 0x6, 0x6, 0x2, 0x4}, {0x7, 0x6, 0x1, 0x10001, 0x78, 0xffffffff, 0x4}, {0x8000000c, 0x0, 0x1, 0x83fb, 0xffff, 0x3f, 0x400}, {0x7, 0x4ab, 0x4, 0x7fff000, 0x9, 0x0, 0x4}, {0x6, 0x6, 0x2, 0xd27d, 0x3ee3, 0x85, 0x9}, {0x80000007, 0x3, 0x0, 0x800, 0x8, 0x81, 0xe34}]}) write(r3, &(0x7f0000000340), 0x41395527) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000040)) r4 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r9, 0x10, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x100) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1042, 0x0, &(0x7f0000001780)=ANY=[@ANYRES32=r4, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES16, @ANYBLOB="890e2516ac2117e1168331c23af26efcbb132897005a8a0a64e8d69703c2ee9eb428c9720579906248f5389df308375d1480339ade58d3acbc6436edb3244a12249667c9af14ac1412ff823f2a9753d803ef0a4b190f612f84f2bda51f1f9d2a0e934ab151efff57db55e025e822b9cb1c4c0e739096d78527729f23e7d38580cec159c785c1d0543100b62c74d87b0370acf09ef05acb5029181eda6f82661c5cbc247a6de7dc12cda413f9c8bf9af704d6630d91fc632ad60709c07a3bfe7809f02cc0e6913147c66e919640239a5b8687c28381cf53697f1e187c6c06e370e68fd87073bdaeeeae942f15ba30959cefd79103f55e8529"], @ANYRES64=r5, @ANYRESHEX=r5, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYRESDEC=r0, @ANYRESOCT, @ANYRESOCT=r2], @ANYBLOB="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", @ANYRES16, @ANYRES16=0x0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRESHEX=r7, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESHEX=r8, @ANYRESHEX], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="acb5460926208047ec8df96b3d97e1b1f598eebf52640329984cf7ef687b25a03a2c4aeeba1f72ce09e27145017b566d7b7083", @ANYRES64=r4, @ANYRES16, @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYRES16=r6, @ANYRESOCT=r9], @ANYBLOB="d353c4e7f557470c90707f7bd2d3f7f001df067ebb979ebb07efe8d961e4e8fb156217b38ec3ed179a8b9325086cde9a5f59919cd9c207b189b549607f8665436bfd8982a849f4387b90a5057ca96e2abf367553569a26b78648f1f3e87a30e58a2051ce246f0c7e93d5a4a9e31c3041f220c8f55c33873c46fd4922f57320ce2f59705d54b9e40cdbf176bca8c36fbc94fca0f17f29ff7791e2d86ae4fe858f4a28ed7bd6be4bdf4ff4f0a7e271f1cd953c2810f67e2d8fcf549d663e", @ANYBLOB="72f57897c999f87316ef0bf34469d777c506665a60044c55680c7d7fa12fa96d259f680c00c3181cd6654dd967fe2abd61088c5421e7dce3e41bb34f6d05a633ebb4c2d108d9bc12611d259f6d0485d4519d2fdd4e0cd1e52bd8418da7eb30cb", @ANYBLOB="1386535c1ef95c96a58b7c884942476aaca53b8f8e04a9d75ec3f62a6d175bf10ad4ebef70ef1dd42483890292be4f49e4c612c6d5a7c497107af7df044c50d5386ff0f4c262a57fedb5440f811c710ac37331522980277635256e820438c16f96f692940f9fbb72a1c217fa2f386bd139ef725c82a735f8ba7dc11604d03a3ca5ea35e0d030221152d16478db40d5d547b4741e3fab56498b44dee5c3ee9850475900cb9564aaa8484287abd6bc0f83b782bf7ea84f18277ef5950e669e3cedf73c8378b4ed00e71b3073b13de49402b3bc9ab683e84dcdde7e64ebbdc7889a8efed6b220b8f843ae296518976232a46e17d384caa381ff"], @ANYPTR64], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:50:58 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(0x0, 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) 21:50:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\t', 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000840)=ANY=[@ANYBLOB]) sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r1, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) r2 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff0900", 0x40}], 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ef60c150d0292440c391714171"], 0x0, 0x0, 0x0}) [ 1998.257379] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1998.408911] binder: 21581:21598 unknown command -1 21:50:58 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(0x0, 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) [ 1998.477091] binder: 21581:21598 ioctl c0306201 20000200 returned -22 21:50:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\t', 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000840)=ANY=[@ANYBLOB]) sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r1, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) r2 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff0900", 0x40}], 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ef60c150d0292440c391714171"], 0x0, 0x0, 0x0}) 21:50:58 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(0x0, 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) 21:50:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\t', 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000840)=ANY=[@ANYBLOB]) sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r1, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) r2 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff0900", 0x40}], 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ef60c150d0292440c391714171"], 0x0, 0x0, 0x0}) 21:50:58 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)) r0 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(0x0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000280)="04", 0x1}]) [ 1998.956283] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 21:50:59 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)) r0 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(0x0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000280)="04", 0x1}]) 21:50:59 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x90, 0x0, &(0x7f0000000100)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x9, 0x2, 0x3f}, @fda={0x66646185, 0x8, 0x1, 0x2c}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000000c0)={0x0, 0x20, 0x40}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:50:59 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 21:50:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\t', 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000840)=ANY=[@ANYBLOB]) sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r1, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) r2 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff0900", 0x40}], 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ef60c150d0292440c391714171"], 0x0, 0x0, 0x0}) 21:50:59 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)) r0 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(0x0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000280)="04", 0x1}]) 21:50:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r6, 0x0, 0x8}, 0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r6, 0x800, 0x800}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000300)={r6, 0x0, 0x3f, "0286cee2ab1d946ee10ad2b66ff62f386551daefb908f073b76b53ea4e4e31e98f00bfe7d875ac88ce6e60824ce0aaf5e6684e7a67af98291a4547fe69e822"}, 0x47) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={r6, @in={{0x2, 0x4e20, @broadcast}}, [0x7, 0x0, 0x89e, 0x4, 0x2, 0x1, 0x8, 0x7f, 0x108, 0x2852, 0x6, 0xff, 0xffff, 0x9, 0x4]}, &(0x7f00000001c0)=0x100) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={r7, 0x1}, 0x8) 21:50:59 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x0, 0x0) 21:50:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\t', 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000840)=ANY=[@ANYBLOB]) sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r1, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) r2 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff0900", 0x40}], 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ef60c150d0292440c391714171"], 0x0, 0x0, 0x0}) 21:50:59 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x0, 0x0) 21:51:00 executing program 0 (fault-call:4 fault-nth:0): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001440)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001480)={@rand_addr, @loopback, 0x0}, &(0x7f00000016c0)=0xc) bind$packet(r1, &(0x7f0000001700)={0x11, 0x16, r2, 0x1, 0xe9, 0x6, @local}, 0x14) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x4000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001400)='/dev/net/tun\x00', 0x2001, 0x0) pwritev(r3, &(0x7f00000014c0)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000080)="4742e2e1ac0e0236091cbf3e0914924f2f52fdd52605a6111e7d38fa5195698c6e3da3d8c771753a465ac9cc6de5ed831cf03cca982590ee56976d07072c316a0dafb489ed173bae864ba7e8f38ba7dc4c293d8c48791b1161c775a91adc2c472ff656dd5ef04ab1e72365d7dd5655102470a3b58e2749a1ddbe24c34bcd53db82d243cd36905e7eabd8651b1cc8bdca3f248dba3ebb9477626818905e0270db58294d20972ddf53b1b316d92f8a30e683de", 0xb2}, {&(0x7f0000000140)="61dbf86e85dc64db96a22100fa808a7049acee3b361b9cd77facb1617e78f7008aee9ed837e54458628fc947e41d620a5387d06d52f7eb2d69477750991d3df07832e74957094977e859ec03506b03d285479663234b843275cbd848f3176a501c865881bc73414be607b585fe4ccc38ce3130dc205dd0b14e1f155df6338b8cb645c38e7a5a286342e614e2b91e38b6e7a30dd039460ffdd5a3c665f11b525398c6549f279893b526f4295636bb925031b89bc53e4e", 0x94}, {&(0x7f00000002c0)="91361429412e45ab729f7bd8795aed8fb6602ad666219a1cc399736d68bf4dc98ed295e18262d1210fefd21e9ac08cfcc5026a4607038c43f6c734df2702fdb06a46daceb62bad630962f842b7e2f89efe79cb0749c122bc760689a86dac086c10426e53759b6be328649101fa09d55e82b22d5c4a4fd289bad489be78332ab4381743c0d4d26e6307f882a71a18746cbe784aaf09284cf7505db9ad4a41f541ee3b4c33793c0c30a0e3d439a4277f436b732a7a3420c132a84faab5aa07e7cf38a573959ed6039bd211f18a40aaa8df65ec22e942b16cee16b5fd117c372b47", 0x82}, {&(0x7f0000001540)="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", 0x9d}], 0x5, 0x100400000) 21:51:00 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x0, 0x0) [ 2000.023449] FAULT_INJECTION: forcing a failure. [ 2000.023449] name failslab, interval 1, probability 0, space 0, times 0 [ 2000.130286] CPU: 0 PID: 21654 Comm: syz-executor.0 Not tainted 4.14.160-syzkaller #0 [ 2000.138219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2000.147598] Call Trace: [ 2000.150211] dump_stack+0x142/0x197 [ 2000.153851] should_fail.cold+0x10f/0x159 [ 2000.158021] should_failslab+0xdb/0x130 [ 2000.162021] kmem_cache_alloc_trace+0x2e9/0x790 [ 2000.166722] binder_thread_write+0x146f/0x2200 [ 2000.171323] ? perf_trace_lock+0x109/0x500 [ 2000.175582] ? binder_transaction+0x5e80/0x5e80 [ 2000.180266] ? __might_fault+0x110/0x1d0 [ 2000.184352] ? lock_downgrade+0x740/0x740 [ 2000.188524] ? kasan_check_write+0x14/0x20 [ 2000.192776] ? _copy_from_user+0x99/0x110 [ 2000.196953] binder_ioctl_write_read.isra.0+0x189/0x860 [ 2000.202348] ? binder_thread_write+0x2200/0x2200 [ 2000.207130] ? _raw_spin_unlock+0x2d/0x50 [ 2000.211314] binder_ioctl+0x2fc/0xfcc [ 2000.215140] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 2000.220709] ? __might_sleep+0x93/0xb0 [ 2000.224617] ? __fget+0x210/0x370 [ 2000.228103] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 2000.233671] do_vfs_ioctl+0x7ae/0x1060 [ 2000.237603] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2000.242381] ? lock_downgrade+0x740/0x740 [ 2000.246555] ? ioctl_preallocate+0x1c0/0x1c0 [ 2000.250988] ? __fget+0x237/0x370 [ 2000.254457] ? security_file_ioctl+0x89/0xb0 [ 2000.258889] SyS_ioctl+0x8f/0xc0 [ 2000.262276] ? do_vfs_ioctl+0x1060/0x1060 [ 2000.266444] do_syscall_64+0x1e8/0x640 [ 2000.270350] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2000.275215] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2000.280418] RIP: 0033:0x45a919 [ 2000.283615] RSP: 002b:00007f50ef224c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2000.291346] RAX: ffffffffffffffda RBX: 00007f50ef224c90 RCX: 000000000045a919 [ 2000.298633] RDX: 00000000200003c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 2000.305920] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2000.313229] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f50ef2256d4 [ 2000.320515] R13: 00000000004c2162 R14: 00000000004d7298 R15: 0000000000000005 21:51:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x70100, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000880)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000b002000000000000d0000000d00000000000000000000000e0010000e0010000e0010000e0010000e001000003000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/48], @ANYBLOB="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"], 0x310) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x240, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000400)={{0x2, 0x6, 0xfffffff7, 0x401, '\x00', 0x7}, 0x2, 0x400, 0xc29, r3, 0x4, 0xfffffaea, 'syz0\x00', &(0x7f0000000100)=['/dev/binder#\x00', '/dev/binder#\x00', '/dev/binder#\x00', '/dev/binder#\x00'], 0x34, [], [0x6, 0x800, 0x40, 0x6]}) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0xf, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7711bb00"/15], 0x0, 0x0, 0x0}) 21:51:00 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x0, &(0x7f0000000340)) 21:51:00 executing program 1: r0 = open(&(0x7f0000000340)='./bus\x00', 0x40, 0x189) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xffffffffffffff73) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8fff) r2 = dup(r1) write$P9_RVERSION(r2, &(0x7f0000000400)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) r3 = syz_open_dev$binderN(&(0x7f0000000380)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r4, &(0x7f0000000100)="69e8d8723c269c3d5298c11a03fd4057096ff3578cbd2ecf7bbc1671703fc68afe7945cb535c08c33ef6cf108575f85d33309bd2907ddde5a7739ebda8f1acec06818769992137d2d364156c3f094a8cf35e2ebf13828502049b0b3d10595aa90a2a35fdc8f60660a17618628233379ac103a6d00888d22a3cb0bbfeaf15135d1fa63dcdedf1ddb1e261224496c6657dd44b28fb8b55ba271684df251f52c8716f9615fcc4584d61f5e87cfe48a9ce9d6adc29b3c91d83cd32592de2a58d48bd172e3ddd4b5499b984fbb90d2fefccaec6f4328156c576840abd28934e2088", &(0x7f0000000280)=""/135}, 0x20) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001, 0x2119013, r4, 0x4000) r6 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) getsockopt$nfc_llcp(r6, 0x118, 0x0, &(0x7f0000000000)=""/17, 0x11) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e630c0180000000000c000062231a"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cachefiles\x00', 0x81, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x28, 0x10, 0x93872f499065bd43, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x28}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2000, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000140)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000480)=0xe8) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x800100000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000040)=@framed={{}, [@exit, @ldst={0x2, 0x2, 0x2, 0x0, 0x0, 0x30, 0x10}, @ldst={0x2, 0x0, 0x0, 0x7, 0x0, 0x2}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x85, &(0x7f0000000280)=""/133, 0x40f00, 0x17, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x5, 0x6c6, 0xfff}, 0x10, r5}, 0x78) r6 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0x323) r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8fff) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f00000000c0)=@raw=[@map={0x18, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000240)='GPL\x00', 0x8, 0xc1, &(0x7f0000000280)=""/193, 0x41000, 0x4, [], r3, 0x17, r4, 0x8, &(0x7f00000004c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x0, 0x800, 0x8}, 0x10, r5, r7}, 0x78) 21:51:00 executing program 0 (fault-call:4 fault-nth:1): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2000.468159] binder: 21664:21665 unknown command 12259703 21:51:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0xcae170cf3226cf3e, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x8001}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r3, 0x2}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2000.508676] binder: 21664:21665 ioctl c0306201 20000200 returned -22 [ 2000.539184] binder: 21664:21677 unknown command 12259703 [ 2000.553085] binder: 21668:21678 unknown command 17589006 21:51:00 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x0, &(0x7f0000000340)) [ 2000.558461] binder: 21664:21677 ioctl c0306201 20000200 returned -22 [ 2000.564600] binder: 21668:21678 ioctl c0306201 200003c0 returned -22 21:51:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141142, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) ioctl$int_out(r2, 0x5460, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x4000, 0x0) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e63274000"/16], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) [ 2000.614487] kauditd_printk_skb: 10 callbacks suppressed [ 2000.614496] audit: type=1804 audit(1577137860.751:8830): pid=21679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2850/bus" dev="sda1" ino=17004 res=1 21:51:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) read$FUSE(r3, &(0x7f0000000400), 0x1000) 21:51:00 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x0, &(0x7f0000000340)) [ 2000.801195] audit: type=1804 audit(1577137860.941:8831): pid=21690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir423096274/syzkaller.0IKwTW/898/bus" dev="sda1" ino=16995 res=1 [ 2000.869310] binder: 21687:21695 unknown command 1076323086 [ 2000.884643] audit: type=1804 audit(1577137860.941:8832): pid=21692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir447032748/syzkaller.bNKEoG/1564/bus" dev="sda1" ino=17888 res=1 [ 2000.919348] binder: 21687:21695 ioctl c0306201 200003c0 returned -22 [ 2000.976058] audit: type=1804 audit(1577137861.091:8833): pid=21690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir423096274/syzkaller.0IKwTW/898/bus" dev="sda1" ino=16995 res=1 21:51:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x13) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8fff) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f00000000c0)=r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) [ 2001.016353] audit: type=1804 audit(1577137861.111:8834): pid=21692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir447032748/syzkaller.bNKEoG/1564/bus" dev="sda1" ino=17888 res=1 21:51:01 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[0x0]) 21:51:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000040)=0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2001.135676] audit: type=1804 audit(1577137861.271:8835): pid=21704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir423096274/syzkaller.0IKwTW/899/bus" dev="sda1" ino=17111 res=1 21:51:01 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[0x0]) 21:51:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000800000000000000000000000000cde6869970521ab0692412a7b88d6f0aef6a75866934d92549895989443c8baf1cef4d69d6e0cae9873f0e3e830171fd72139da9b3fe5bb3b8b7da5cb9639a2348aa3da855be4dbb64fa423c81188b11b5716e62c2c40e4b2d56a33ea2fc3840401f6ecd534528e86eafb4cdff94f56ccb19d3c81970569a7a", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080088a8ffff"], 0x3c}}, 0x0) 21:51:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000100)=[@request_death], 0xfffffffffffffee4, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) [ 2001.315844] audit: type=1804 audit(1577137861.451:8836): pid=21704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir423096274/syzkaller.0IKwTW/899/bus" dev="sda1" ino=17111 res=1 [ 2001.399667] audit: type=1804 audit(1577137861.511:8837): pid=21714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir447032748/syzkaller.bNKEoG/1566/bus" dev="sda1" ino=16737 res=1 [ 2001.488900] binder: 21718:21722 ioctl c0306201 200003c0 returned -14 [ 2001.522953] audit: type=1804 audit(1577137861.661:8838): pid=21716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir447032748/syzkaller.bNKEoG/1566/bus" dev="sda1" ino=16737 res=1 21:51:01 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x323) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8fff) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000007500)={0xf61ffff, 0x0, 0x6, r2, 0x0, &(0x7f00000074c0)={0x380009, 0x1, [], @value=0xe25}}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00001500", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00ddd3ffff010062726964676500000c0002000800080088a8ffff"], 0x3}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r6, 0x0) stat(&(0x7f0000000180)='./bus/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='9p\x00', 0x6c, &(0x7f0000000580)={'trans=unix,', {[{@dfltuid={'dfltuid', 0x3d, r5}}, {@cachetag={'cachetag', 0x3d, '\xb0\xac\xcb\xb8\x03'}}, {@version_9p2000='version=9p2000'}, {@fscache='fscache'}, {@access_any='access=any'}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@afid={'afid'}}, {@cache_fscache='cache=fscache'}, {@version_9p2000='version=9p2000'}, {@cache_fscache='cache=fscache'}], [{@measure='measure'}, {@subj_role={'subj_role'}}, {@context={'context', 0x3d, 'root'}}, {@uid_lt={'uid<', r7}}, {@hash='hash'}, {@smackfsdef={'smackfsdef', 0x3d, 'K'}}]}}) 21:51:01 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[0x0]) 21:51:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05610440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2001.674979] audit: type=1804 audit(1577137861.811:8839): pid=21732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2852/bus" dev="sda1" ino=16737 res=1 21:51:01 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) 21:51:02 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) 21:51:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e630c40000000001800000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYRES64], 0x0, 0x0, 0x0}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000140)={0x0, 0x6}, 0x8) write$FUSE_STATFS(r1, &(0x7f00000000c0)={0x60, 0x0, 0x7, {{0xffffffffffffffe0, 0x0, 0x7fffffff, 0x8, 0x7da, 0x9, 0x40, 0x6}}}, 0x60) 21:51:02 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) 21:51:02 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000280)="04", 0x1}]) 21:51:02 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000280)="04", 0x1}]) 21:51:02 executing program 2: prctl$PR_GET_SECUREBITS(0x1b) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) r1 = accept4(r0, &(0x7f0000000080)=@ipx, &(0x7f0000000140)=0x80, 0x100000) connect$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, {0xff, 0xc3, 0x81, 0x9, 0xa1, 0x1}, 0x4, 0x2}, 0xe) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000001c0)={0x4, [0x5, 0x0, 0xfff7, 0x3]}, &(0x7f0000000200)=0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x2, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) semget(0x1, 0x4, 0x4) 21:51:02 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000280)="04", 0x1}]) 21:51:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/\x06\x00\x00\x01\x00\x00\x80\x00er#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) write$P9_RXATTRCREATE(r2, &(0x7f0000000040)={0x7, 0x21, 0x2}, 0x7) 21:51:02 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 2002.723129] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 21:51:03 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 21:51:03 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 21:51:03 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)}]) 21:51:03 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)}]) [ 2003.393398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 21:51:03 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)}]) 21:51:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip_vti0\x00'}) 21:51:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f00000002c0)={0xfed1, 0xc5a, 0x0, 0xd9, 0x4, 0x8d1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056315444070a005afaa7df7991a6f5d9664a04fd68348601918c5dfcf5ab12bd7d524f3221e9a6fd31d270c404e7b29ff160bac200717d0f02b5a8d4291c322ade88fe10931b50ecaa9e17510ee4a55c7590f37baa0"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e22, @broadcast}}, 0x0, 0x0, 0x23, 0x0, "b58f2a3723ca67213a445a6265ae7fe48deb6adece45eaabd6cae1425777e73179278c6692df2c97a3ec68eca9201370844d94b0d1848bb635c783df9cff0922b19ce8aad7b5f3c04886054f710bbf79"}, 0xd8) syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) 21:51:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8fff) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x6) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000080)) [ 2003.639139] binder: 21804:21805 unknown command 1142252293 [ 2003.666799] binder: 21804:21805 ioctl c0306201 20000200 returned -22 21:51:03 executing program 3 (fault-call:4 fault-nth:0): rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) [ 2003.817315] FAULT_INJECTION: forcing a failure. [ 2003.817315] name failslab, interval 1, probability 0, space 0, times 0 [ 2003.845731] CPU: 1 PID: 21813 Comm: syz-executor.3 Not tainted 4.14.160-syzkaller #0 [ 2003.853668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2003.853675] Call Trace: 21:51:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000600)={r4, &(0x7f00000003c0)=""/221}) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000040)={r4, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="c4edb2217e179161920956b15b67ea4121f546b05c1d498229c86f01c6f5a3bb8f0d3cfc13154e5244a841f0b04fdef42fd9d495efb45660fb450b9c9576e8554ad30b211f99"]], 0x0, 0x0, 0x0}) [ 2003.853698] dump_stack+0x142/0x197 [ 2003.853717] should_fail.cold+0x10f/0x159 [ 2003.853738] should_failslab+0xdb/0x130 [ 2003.853748] kmem_cache_alloc+0x2d7/0x780 [ 2003.853759] ? trace_hardirqs_on+0xd/0x10 [ 2003.853769] ? get_reqs_available+0x228/0x3d0 [ 2003.853786] do_io_submit+0x2c4/0x13f0 [ 2003.853808] ? free_ioctx_users+0x3e0/0x3e0 [ 2003.853831] ? SyS_write+0x15e/0x230 [ 2003.853842] ? SyS_io_destroy+0x310/0x310 [ 2003.853856] SyS_io_submit+0x28/0x30 [ 2003.853867] ? SyS_io_submit+0x28/0x30 [ 2003.853881] do_syscall_64+0x1e8/0x640 [ 2003.853891] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2003.853910] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2003.853920] RIP: 0033:0x45a919 [ 2003.853926] RSP: 002b:00007f1bbed49c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2003.853939] RAX: ffffffffffffffda RBX: 00007f1bbed49c90 RCX: 000000000045a919 [ 2003.853945] RDX: 0000000020000340 RSI: 000000000000026b RDI: 00007f1bbed29000 [ 2003.853951] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 21:51:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binPer#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = gettid() tkill(r2, 0x3c) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8fff) r5 = gettid() tkill(r5, 0x3c) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffee0, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f0000001780)=ANY=[@ANYRESDEC=r2, @ANYPTR64, @ANYPTR64, @ANYRESHEX=0x0, @ANYBLOB="a0023c5923146757631769e57b31202b5b0bdb66572dc959970e783deb0866b2828f3d5f07231d8429d2882862251ebc3b40314af0ceb3917e2136d89591c62fe4c54a9b3b03a97fe6d42a9bc4a5004e6ca1ea813fd7018517ee20b4517ca138d38c5e7ffb88cd21a8f066e92cbc2d29235fa92f9dddcd59c21e58f9d04e83a9edf7ad4ac57472d29bc5adf0869191e06285f486e02b0fdcb371a7077a0782dd68fd0812bb0b8de4de42e960a592c9adb2caae76f1bd42d60a7ee9d29006be47bdfa101eb5965bf9fbf8be7d6b007d7c03cf7e9a64c95f24b5964a874aaacb5f0c410bf01239d3a5957a7982781a2a6593a7b02b9c69e3f4fb9f1a086ec999ee769ec69b0194bc654d89948f91821646930bae1462f75b95db56a844756ab35020f51e8472a0cb0a50e446857f91dcc9ff92f0943ff1701f5854f276ab3ba0b92be04800ceda6736acd47f256f344560462deec51bf5b947d447fd5f02a929441e8bbec18c395c300126417833b4258d939ddddd15d496d747ac781e519a48b147f46b43bb1a5f339da4971569f904f76bd0d424b862a96e1af30b00fb006e2ae1b7453751933eb1d650d8f0e655e7d62e922649c5d8a6c168b0873bccab306a2020bf4a8f9c696f72eeb8ebb6173be7aed0edfe92c982c66ce9f3cf7bcc6a51dc3a6aedac6d04e23fdcf4b31fbe8b49e9fa5cd1703c21d275dc53befce089452fb3fb16f73278b716a4877f3091173a377b676efef810cd60367db29599b8b5f45f180391c8b30d39d34d206eeeff5ee4f49c977c048c91fae470737b89fcacbe2fb81767a872409ef4cba9d9c84b02a2f9fe1e8d44b62771258b6cf60fc0e563828611d9824d1d5f3d2c789123d58450f9f115ef5593f33e79632c819a66a81dd0fde5013259bfa9d0d5da44705783f2793e5c116facdd55d47c2da62f28e8bcb56c0f2861e19042458fd0a6fb4fdbcbcc39840f5219559ff6042a6c878dba628c1122d292f94fb1ce99b3f8f9d454c9ca4f5c275df52c8ecae7893939c129df5c1bb272049c1d8c19d979600cacccd7d0c14b19bb49b853e7e36ebaa29bf347f10c18ddfd2000155f3cf850c58d3b0fdd2aedd33908823600771786eed8d534479a1c055af20bc61eb4e8b31216bb8472f97cccf1ec68a4845b98ca3a4d0ba0efe4aed150aa220c7366e88ea6ee90536f5a55804a9c6edfb8fd3a7373b6c2a0689400b24aa903b105b51cef0d5654f01297e908341828740881a2e34473f67a6e7d64b6ba5fe3d884ffe3bd5d64653a0e643cd77152b1149b478016e42a82643a790d3779a558b2d5f9ec61eb8f6e15ab7b8704e2a9b5d73fa4917ad03f6d66898ec5be6c821a7ce06e37de92152058406a27f6686a40fb29edeb4e40ab1c48350d0b77879193d126e051823e312cf9b381d3141c73b711981ad57acf368e841d0812de576d1f082bd7c9c4a178c9856d3bd1f084be88b09d9b09a38130ad5cce28ba8a3da97a70efeb2d2fc1d687a521452de687215ef5b9ed2fb51d64f2f5ef60a5ead1d32c4498377a5655833605fdc055eaf32320fe5f3162c817ec1e444f855187f802b31366372dcb8baeed3e08d793f9c317093a2eb84ab6a7c24ab3091529b1bc4251fcc128f090e2a357eb1606fa69424c59c748f87a6cba092295f325cce549b2f0a6e045214962e6cc7c63590651eda1167e3d41f0fb22d1f3f19cbd540a51ff09f203b836b450548f67589f7d1b5160c093df0cefd2453b33f055266b5950281411d104315ba5c49d9587921f7a2365e6674d538680aa26ede266c2a935f6adb5fca069c0d0c9aa025abea21865f7ad0c150c564451525cdb5696900d64ead370574a50940278d5f978ab2b4f187f6a384558782566f0eab5e3c1d4b83283a5ad78cf334e3b61ea3cc2b73a7a61338927132807f11cf248ca2811159d520af338803b5781275653fcfc6e3c598b8f7b39b38a7ebd1ca460e235d824dceeebcede28ee176b5dcc6247bdad86e21b9e24e7d55759f22addee4347d0c5d84b136558cd2d3086215b4a5c91ef48a61681b891a9a41ab894ff24873511630c50fbf1521c335a30fd5176c1058986c689227a731174a69c7a2846cffee4bd55377a35384592c2c94d36ab75415592fdddac023cb058521b16852829d80e94c999207c17bb613ab57210183c995deec78cdeac84f5a132e3901037118be9846084e81129ed844434d76772b41bc0bd8776ce2bcf9a44359ed5ae941e2f85b7a2d7a9123b5e25a9fa63971de4686594e9d5a53ab74692a4ad1d72ef6f59cbca19d1ce539253ebf2cb9395bbce3863e305221193a4d51c45fb035804afca2428c796350aeb289eb8ae7ff22b05047b060b640f4ac398161ecc88c1be58361e5370b3efca69800cd2b048ad14f4400725b0cb6e3364b8fe90f99e0e798eac1741cf9f1834cbf8e0d2e64442ed638f0ca45ccf68052c81d47e10d7c09c2acb1bb23882cc7377343964367f1d7f31e605df269883d4fd813e0d2f8456584069662177478f9da81df5799b7dfd52a48c3215e5b73a37fa55fd5136d744030ad957b2f8188be79e88add7e733e5a09e6a2a669fb2e4a9a509f974167a129a630a422c17d79ee23ca09e7691449a4c2aa5c1a531c53c907a88b1ac2aa48985ff4b2a0fc9df825a3757af537577c8744a2dfbe330107fdb699ea930441df0701264c87147f0f582eaee26b04874d9517c5af6744046016d4f44a0c31e9f6aa70fc7d933388e0abdc392cb64592e73fe810f7198b4a43d16de9187feefa291783c0556a578babea7b39f1080b750f10a75fde970cd5f1a52e755779eee8ba425223cb4e992489e472d1a9940dbdc3a0759d751fdced6a6b349cf8e2c8e136d61c601abdd2a39fddca12ab1c52f8bceb3ea2fb20d38f9ff20464c38ae0e9ba18487b5f03f65e0a88d542daf2d4f884e0609935f1d3b1b93fef9132e49520f79b49f8327809e1ae71dee37ccc3c24c2588dbb99c3f09c4d9db9394f3ba8c166cc32538398b3f5141534cdbc2661f3abdc61f5c39f19ba88c064fd98a92e485aeda0033b15c671822a8c8eee3de08ab90a58cd3224fe8161bc41c2f23c586f609f7810211984bea593ccc74ee9a26b6bc4e10745bc208dec9c20356377882cc1ee2574cda8a6983f7cf69c9845392845d5fb09fe95cc78a4e627dcfe40c831054a0d59926b007026a067a860d251de1b6aa2a9d42bf4ea29362df443866c99d9b923d772bc1b1bda1103356a13e753c2861a2ce275ba8996c6194a0baab633d045d5f027182ac512dca19271f1ff251880513935a4d0ecee6d40f29abc0050f2478d1244697a0078e0a33327764c96f8fab9ba4624e1821efe59e2d45fb4718a566f242db1486986182f9880e8e3789691050574d1f4279893ca9492df93e633ec79f760f310a26902b8ffdb171c6c9264d452b9a510f4cc1c7b2c263fa581b45f4afceff3a2787f95765bba5b4092042339d43a8435e877ad4c47d21183eb03cbc993a8425a28a390019b2a9acf04b40681053300a9be95e616e13fac87183f570c47911304cbd0c3950a3802c805c61d1fbcb0e67f60870b94b1a492cc58889c67103d17b4e585f56f5aaa892943c9b1da2af0fe065efd47fa2bb5590e006b46467f8749f1667412001a42172fb54477a5a48723ee1c7a3151f90c50eaa9676ab41c77ded95ad1513efa869879d3f167e502221146e47bbd8d9c15f057836d156ad47818d8715fe91104ff2748616cb9095a450140d85b9a8cf31371c29d90ef0c64096b300eb07dd6959777c818c69475bfe944a4d9e25893ebd470381407ec5d06cab386bf769b0ff7e8525477ea321ae4c0e08fe00638cec587532cb75e3676cd6cee7959fdbc7af87e44053fb765b19d32c1fce2e9189d9a4458d319f26409cc2b09823bd92274f51f1027402288143e7c9f94767822868746906238954e3d40d63595150443c2e39b570e381d6993bcdc5d959181b62ac2c232b5eb21ff36a7c3979635dbe3d49260fe8143e66640450543c2965c9beefe6b1a58250f41c1480f87a414bce1e9b2db6e3ef6140a0488387cb90290ff458280e322538d254f67be4d2d20f57ef2e7a00d441a0987324d4a32a27f4779231cafb55b18b732b920726fc653b50d2cfee50296db1de2184218da581e6bf160615197d8ba5053a6ba1963452dca858bcb522107310eb196932bac35a5bdc07dd4479cd3dece49664896095a160825c15fae7adbc348633bfbaf611611edc8411dc8022a492c316d2280537455e5921868a160b5757ec6b6b3613bfe4e48544e9b24c4a1db9f6d8504221f08040bfe7e40e28732665bdf1267c50c1e0cc2409ba4f51f3201f3d70d4bff267649218341556d813769f1b2f469a87d462c2be2d5043ef816b09ae2ade1581a1fa359e1a626f133101e422f0e722e7ef83b1051938e55a7b6b7927b2a419ffd624ef7f049f00bba36fc0557403055c4ac2a68ef9ab840be0dbf505ff6b9974b99168147837533df7a9f905cd73054508c40950706395fcfac0e35d1fe9020f235397faafbf6f9db6bda223555d8db6047b0eb4811a1bbb9b4744669960ebc042d958ecec57cfb900e3097d7a3ab49d6d1b5a09518d4c161086ca254d74566df6fc68fb46de885802af0dd91e15667252d56ae897dece8e974bd51dbcd7176f7fb74d9484c26ed793c8c1dba5245e4b20f1e3cdab405a41f4e909cd29c8f564e561bc93d4919e8fa5ef977b564401dfc196f61bf2d95ae40ab39cdfb7f1f732aa92f4e90d7f42466383948bf112a70fc9097c5e068fcc7536bb56c8f6fd4b7b3840c8ee3352ed553dfd4212637f6af358ee3f522c30c22c19568eb3bff13c7fbfa880e3d820bb6c201e415a0950c0d69d1f5b27045fe8f8c0489e151a4d6c7f87549227ec9d1979eb5b0184a5a371cd9f4c628b52d7cda2c2ef8ff61ad142608814d2fde3fc1af0fc3cdfb78b6e0315e73650eb1eb753246b8b56340f8161b103a86b2cd940dd7683c264ecaa6e01fcefdcbb7f025bf806e4a7b44845c0ab9bc52e7dc3a44c01de01a837ef86ef92dbc9da945571c93c3c157fac573f2e84f4ec817440e2a62807fd296f3d8ce3be06c5043d40a4b012c13337b2ae4e7e49382420ef17a27def663b629f074bee05b6168f1738d3c0cb8c631d7a6ddc3434979009c8644315b83f9b9c7847ee734e0d5c0564d1a883a4e1765d3ab3e72372d258eb0774678209d6a2b972bdfa5a7911e28266ae341b103cd82acd6c381ed162d0d3bd768a73721af9a56a8efd3c345c03385aab60d2f794e46583b429bfa247f28ecc672a53927111824503f91f2d8c222ea2cca96708fbcbf241de2325e2bda7504bc92371f54ace649123a815c769750cf9db8f6e3cd837671f84d6ac7e254f86d66b3e72f9aec386cb0aa6d276b016d4e3ffddc0089d25460fd05072afd5b421c780ad40833c1f1efd2791f3ccf20f478bc6cd2ebd388dc84ebdb1e251b4022e00831f2d0914704111d1c3b4f19b0e8f0887f6700c86b2117f5bdf635d846e64239cfb42975e5524f81f913a80558874d674a59d56ac28a56aa210e3d7346e1899396347134ad00ed891f7e80233684f07f94dc26713893f982aaff18c23a3d76c742d766173bf6db5be7edf2d9a6b4c32c40556e9a9d6506d618c49b86d9ccb278dfe4e2735912777e63393b3fa3531e0f897ed7facc89f3604f4369fed34a3127bed64d4281a0c4d4a2ee4fb80dc02774f280b69b6926c7aab7015", @ANYRESDEC=r6, @ANYRES32=0x0, @ANYRESHEX=r5]]], 0x0, 0x0, 0x0}) r7 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x66c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x80, 0x0, &(0x7f00000002c0)=[@free_buffer={0x40086303, r7}, @clear_death={0x400c630f, 0x2}, @increfs_done, @decrefs={0x40046307, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x1, 0x1, 0x26}, @flat=@handle={0x73682a85, 0xa, 0x3}, @flat=@handle={0x73682a85, 0x0, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}}, @register_looper], 0x0, 0x0, 0x0}) r8 = getpid() sched_setattr(r8, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000100)=0x80000001) [ 2003.853962] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1bbed4a6d4 [ 2003.898649] R13: 00000000004c2019 R14: 00000000004d7040 R15: 0000000000000004 [ 2003.985551] binder: 21815:21819 unknown command 536871104 [ 2003.999908] binder: 21815:21819 ioctl c0306201 20000080 returned -22 21:51:04 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/140) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000001c0)) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x400084, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f0000000180)) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) 21:51:04 executing program 3 (fault-call:4 fault-nth:1): rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) 21:51:04 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x804) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0xfe3615b18a0678c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2004.195563] FAULT_INJECTION: forcing a failure. [ 2004.195563] name failslab, interval 1, probability 0, space 0, times 0 [ 2004.207472] CPU: 0 PID: 21829 Comm: syz-executor.3 Not tainted 4.14.160-syzkaller #0 [ 2004.215399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2004.224767] Call Trace: [ 2004.227379] dump_stack+0x142/0x197 [ 2004.231036] should_fail.cold+0x10f/0x159 [ 2004.235208] should_failslab+0xdb/0x130 [ 2004.239203] kmem_cache_alloc+0x47/0x780 [ 2004.243309] ? lock_downgrade+0x740/0x740 [ 2004.247482] __sigqueue_alloc+0x1da/0x400 [ 2004.251647] __send_signal+0x6d1/0x1280 [ 2004.255661] send_signal+0x49/0xc0 [ 2004.259217] do_send_sig_info+0x85/0x100 [ 2004.263298] ? __lock_task_sighand+0x660/0x660 [ 2004.267900] send_sig+0x40/0x60 [ 2004.271203] generic_file_write_iter+0x536/0x660 [ 2004.275986] aio_write+0x2c7/0x4f0 [ 2004.279541] ? perf_trace_lock+0x109/0x500 [ 2004.283796] ? aio_complete+0xc90/0xc90 [ 2004.287788] ? SOFTIRQ_verbose+0x10/0x10 [ 2004.291863] ? __might_fault+0x110/0x1d0 [ 2004.295944] ? __might_fault+0x110/0x1d0 [ 2004.300030] ? lock_downgrade+0x740/0x740 [ 2004.304206] do_io_submit+0x996/0x13f0 [ 2004.308124] ? free_ioctx_users+0x3e0/0x3e0 [ 2004.312476] ? SyS_write+0x15e/0x230 [ 2004.316208] ? SyS_io_destroy+0x310/0x310 [ 2004.320368] SyS_io_submit+0x28/0x30 [ 2004.324103] ? SyS_io_submit+0x28/0x30 [ 2004.328006] do_syscall_64+0x1e8/0x640 [ 2004.331913] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2004.336891] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2004.342097] RIP: 0033:0x45a919 [ 2004.345297] RSP: 002b:00007f1bbed49c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2004.353031] RAX: ffffffffffffffda RBX: 00007f1bbed49c90 RCX: 000000000045a919 [ 2004.360321] RDX: 0000000020000340 RSI: 000000000000026b RDI: 00007f1bbed29000 [ 2004.367609] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2004.374898] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1bbed4a6d4 [ 2004.382185] R13: 00000000004c2019 R14: 00000000004d7040 R15: 0000000000000004 21:51:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 2004.401330] binder: 21830:21831 unknown command 0 [ 2004.406752] binder: 21830:21831 ioctl c0306201 20000200 returned -22 21:51:04 executing program 3 (fault-call:4 fault-nth:2): rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) 21:51:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000140)=0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x121201, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0xd000, 0x8000}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x1f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) [ 2004.559341] binder: 21835:21837 unknown command 1074062086 [ 2004.578643] binder: 21835:21837 ioctl c0306201 200003c0 returned -22 21:51:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x400000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:04 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x4}, 0x18) 21:51:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x608800, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x2e, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 'nq\x00', 0x12, 0x20, 0x61}, 0x2c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc9, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2004.774223] binder: 21815:21817 unknown command 536871104 [ 2004.784891] binder: 21815:21817 ioctl c0306201 20000080 returned -22 21:51:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) setsockopt$packet_int(r3, 0x107, 0x6, &(0x7f0000000440)=0xff, 0x4) sendfile(r1, r2, 0x0, 0x8fff) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xa10000, 0x1ff, 0x9, r1, 0x0, &(0x7f00000000c0)={0x1d81830, 0x3, [], @value=0x1f}}) write$P9_RREADDIR(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="030100002902000080000000040000000400000000000000ffffff7f000000000207002e2f66696c653004020000000800000000000000a50e0000000000000407002e2f66696c653004010000000100000000000000ff0f0000000000000907002e2f66696c6530240000000000000000000000003f000000000000000007002e2f66696c65300003000000020000000000000004000000000000000707002e2f66696fb7300003000000010000000000000001000000000000007f07002e2f66696c65300001000000060000000000000004000000000000000007002e2f66696c65300002000000020000000000000003000000000000000207002e2f66696c6530"], 0x103) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000400)={0x1, 0x7f}, 0x2) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x60) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="05630440"], 0xfffffffffffffeb9, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 21:51:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f0000000040)=@bcast) 21:51:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x51, 0x0, 0x0}) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8fff) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000080)="1bd9acec9423d153f4eb6601699e46d1e9e72672e4eb9555bda0d9acbf228e8d85f813334bc398ea45127404972800afc995449688b499dca05c6e2841a428b945df9c63b355e327abd441877de3559cbce3c1a2cce6654938f7a304a078522fc01977a6baca1e1ec55901354a116f425175154c2576e4e441faa47d220aaad196918bd3d704") pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) r8 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0x323) r9 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x8fff) ioctl$TCSETAW(r9, 0x5407, &(0x7f0000000180)={0xf03, 0x0, 0x0, 0x7, 0x13, "559d9f3a4c83e59e"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x17, 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r7], 0x0, 0x0, 0x0}) [ 2005.222122] binder: 21866:21867 ioctl c0306201 20000200 returned -14 [ 2005.398823] binder: 21866:21868 unknown command 808464432 [ 2005.404544] binder: 21866:21868 ioctl c0306201 200003c0 returned -22 21:51:05 executing program 2: getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r2, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r3, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x202100, 0x0) r5 = syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0xed, 0xc04aa847851f5e0c) connect$l2tp(r4, &(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x4, 0x0, 0x4, {0xa, 0x4e20, 0x0, @mcast2, 0x3d81}}}, 0x32) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r7 = getgid() r8 = getegid() getgroups(0x7, &(0x7f0000000300)=[r0, r1, r2, r3, r6, r7, r8]) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x400, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xffffffffffffff58, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 21:51:05 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8fff) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0xa30000, 0x10000, 0xb6db, r2, 0x0, &(0x7f0000000300)={0x9a0921, 0x3, [], @value=0x6}}) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8fff) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000100)={0x9, 0x3, 0x8, 0x10001, 0xbe7, 0x5, 0x383d, 0xffffffff, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={r6, 0xff, 0xb, 0x1, 0x10000, 0x540}, &(0x7f00000001c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000100043bd00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c0001009d79fa1a676500200c000200080008008803432b2f34a8ffffe495b8133372be929ca8e92f6cb6534e1d1d3364444a4a739ac7274127a094d9a7a876778674ec2b30a8cd032ca67ea01da8875e8df5d5a893267af00b9dbf4c8581b14a56485952bd708af296552a3969f9faf378fdae875a49f924ac1584d2b2cfcac22967369f29e0ef69a9354c079401255cdc3359f6be5cefd3247c74c389f19d902a6779c5de3fb24a8d5ab486718bc79ba92d2cbfb92cb7ae75a7efb5d9424ea17c425c1909006d7a6f"], 0x3c}}, 0x0) 21:51:05 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x42b00, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x101, 0xfd, 0x5, 0x7, 0x80, @local}, 0x10) 21:51:05 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) close(r2) [ 2005.744235] kauditd_printk_skb: 11 callbacks suppressed [ 2005.744246] audit: type=1804 audit(1577137865.881:8851): pid=21882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2858/bus" dev="sda1" ino=17013 res=1 21:51:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xffffff1b) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x3ff, 0x20000) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8fff) sendfile(r3, r2, 0x0, 0x8fff) setxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)=@known='system.posix_acl_default\x00', &(0x7f0000000180)='/dev/binder#\x00', 0xd, 0x2) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0)=0x7, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x800) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) [ 2005.893303] audit: type=1804 audit(1577137865.931:8852): pid=21883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2858/bus" dev="sda1" ino=17013 res=1 [ 2005.983673] audit: type=1804 audit(1577137865.941:8853): pid=21883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2858/bus" dev="sda1" ino=17013 res=1 21:51:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dEv\xc2ze\x7fo\x02', 0x22802, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000440)=0x7bb) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x74ab) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x120802, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r5, 0x80045510, &(0x7f0000000280)=0x4) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000040)=0x7fff, &(0x7f0000000080)=0x4) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000100)=0xbaa) perf_event_open(0x0, r6, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_bp={0x0, 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setuid(0x0) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) fstat(0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) 21:51:06 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_getattr(r1, &(0x7f00000000c0)={0x38}, 0x38, 0x0) r2 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20000, 0x0) getsockopt$sock_buf(r4, 0x1, 0x0, &(0x7f0000000400)=""/129, &(0x7f00000002c0)=0x81) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'rose0\x00', 0x1000}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, &(0x7f00000001c0)={0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @null, 0x101, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) ioctl$VT_RELDISP(r6, 0x5605) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000040)) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000280)="04", 0x1}]) [ 2006.247941] Unknown ioctl -2147199728 21:51:06 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)={0xa64d, 0x2}) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) [ 2006.467179] audit: type=1804 audit(1577137866.601:8854): pid=21883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2858/bus" dev="sda1" ino=17013 res=1 21:51:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xfffda888}]}}}]}, 0x3c}}, 0x0) [ 2006.541142] audit: type=1804 audit(1577137866.631:8855): pid=21882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2858/bus" dev="sda1" ino=17013 res=1 21:51:06 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400802, 0x0) recvfrom$netrom(r2, &(0x7f0000000040)=""/29, 0x1d, 0x10020, &(0x7f00000000c0)={{0x3, @null, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x6000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r4, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa69b}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c2}, 0x40) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000140)=0x2, 0x4) [ 2006.657232] audit: type=1804 audit(1577137866.631:8856): pid=21882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2858/bus" dev="sda1" ino=17013 res=1 [ 2006.763077] audit: type=1804 audit(1577137866.761:8857): pid=21892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir423096274/syzkaller.0IKwTW/905/bus" dev="sda1" ino=17089 res=1 [ 2006.836679] audit: type=1804 audit(1577137866.761:8858): pid=21893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir423096274/syzkaller.0IKwTW/905/bus" dev="sda1" ino=17089 res=1 [ 2006.933229] audit: type=1804 audit(1577137866.761:8859): pid=21894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir423096274/syzkaller.0IKwTW/905/bus" dev="sda1" ino=17089 res=1 21:51:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000000c0)=""/96, &(0x7f0000000140)=0x60) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffebe, 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0}) [ 2007.030136] audit: type=1804 audit(1577137867.011:8860): pid=21894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir423096274/syzkaller.0IKwTW/905/bus" dev="sda1" ino=17089 res=1 21:51:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x40) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r5, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) write$P9_RSTATu(r2, &(0x7f0000000080)={0x89, 0x7d, 0x2, {{0x0, 0x67, 0xffff, 0x4, {0x5b424a112515dcc0, 0x0, 0x5}, 0x80000000, 0x100, 0x0, 0x7, 0xd, '/dev/binder#\x00', 0xd, '/dev/binder#\x00', 0xd, '/dev/binder#\x00', 0xd, '/dev/binder#\x00'}, 0xd, '/dev/binder#\x00', r4, r5, r7}}, 0x89) 21:51:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="06630440030000001163484000000000000000000000000000000000000000000000000000000000f700"/84], 0x0, 0x0, 0x0}) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xa873, 0x14}, 0xc) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8fff) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r2, 0x20}, {r3, 0x80}, {r0, 0x420}], 0x3, &(0x7f0000000100)={r5, r6+30000000}, &(0x7f0000000140)={0x9}, 0x8) 21:51:07 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x6, &(0x7f0000000080)=0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000180)={{0x0, 0x0, @identifier="b253ecdb9ea2979013cb888d97d73784"}, 0x89, [], "04f0bc3f6d98902197fc6867501d435183509143748a2c9272816c8b3b2d95b8e38fce0f584997dc2fd84be05f549c333ca62762e151de6d4541f321dc8fde7ef1a8049b78fb995dfe28e7b8ecbe48f7eee0377017e42f7b6c9a52d6faf6502c7b13f33c43056733a7da0446ae987eb9eb3054a28f4aa8b487ea2adb6385b30e16e1f0955d5f2188e8"}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0xe1) sendfile(r1, r2, 0x0, 0x8fff) connect$nfc_raw(r2, &(0x7f0000000000)={0x27, 0x0, 0x1, 0x6}, 0x10) r3 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) ioperm(0x7, 0x3f, 0x2) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000280)="04", 0x1}]) 21:51:08 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)={0xa67, 0x6, 0x4, 0x80000, 0x2, {0x77359400}, {0x4, 0xc, 0xa9, 0x35, 0x2, 0x4, "9ee102f7"}, 0x87a, 0x2, @offset=0x1, 0x8, 0x0, r1}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r5 = syz_open_dev$audion(0xfffffffffffffffd, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000180)={0x20000, 0x0, 0x4, 0x32004, 0x7f, {r3, r4/1000+30000}, {0x4, 0x8, 0x40, 0x9, 0x3, 0x2, "e0504bd6"}, 0x7, 0x3, @fd=r5, 0x9, 0x0, r6}) io_setup(0x3, &(0x7f0000000080)=0x0) r8 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r7, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000280)="04", 0x1}]) 21:51:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x355403, 0x8) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) r3 = mmap$binder(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="00800000c774e8639b87eeddb0f341c888815f5b8a24a2e7e2314efb0155233265ac1c9f0392fa772a0b8385b1fa126eabb0e8362e9e894028bea49f9706735441f7ec1bac7c444153da32a77f1727acd739f938c23788ab0fd6b26bed42e9896a183c4b097f301a0a7766a7cd042480a1a2d109473f00b8653a4b955f207d7682fc4c05a93a0696f6e32a0b10ff02eac6ff7f36af82d2419aa0ddea951ddc920d4cc8bac45afdbf54d0", @ANYRES16=r3], 0x2}}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000900)={0x90, 0x0, &(0x7f00000007c0)=[@request_death, @free_buffer={0x40086303, r3}, @request_death={0x400c630e, 0x3}, @decrefs, @acquire={0x40046305, 0x3}, @decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)={@ptr={0x70742a85, 0x1, &(0x7f0000000600)=""/219, 0xdb, 0x0, 0x40}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000780)={0x0, 0x28, 0x40}}, 0x40}], 0x6b, 0x0, &(0x7f0000000880)="38d5a5a5c7374987cf4b83233c89a46d1c555b121727d8fc074c3b4175554456afddc652ae19300d44bdc7d1aafb2d716247d70bfd1c9d4f0716f52073c69e847612fa859579121d2b3fd22195da230b25e932ca389b473adba3b6ea021e8ace92a06fc604529618f33233"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000005c0)={0xf8, 0x0, &(0x7f0000000400)=[@increfs_done={0x40106308, 0x13}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0xe5a1051819fb6040, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/106, 0x6a, 0x1, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/149, 0x95, 0x0, 0x38}, @fda={0x66646185, 0x4, 0x2, 0x35}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @increfs_done, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x80a, 0x3}, @flat=@binder={0x73622a85, 0x100}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @dead_binder_done, @request_death, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}, @clear_death], 0x87, 0x0, &(0x7f0000000500)="36c920dddba810de8bc13c7d2a4f02d4a20400242a10977b09df0462c16485ac25018245426751582492ccfcdf5424cb89c30e42f3f407cace57f57e71be54d6bf1f82d24a21b5358264b85549e618ccc90dbb27dba949fd67c73fcc571977f93e4cca7ce39c827bbeba00bb6a661dc06eb226fbd160bae0b5bab0cd04a6fd43aa8f2d6d1e289a"}) 21:51:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x200000, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x200080c, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@mask={'mask', 0x3d, 'MAY_WRITE0\x1b\x19\xe7\x99\x05\a\xc7\a\xd9\x99(e~?v\x90t\xe69\xd9\x1e\xbb\x00{\xdb\x7f\x83\x04bx>j\xf9\x9d\xe3\xd6\xc0\xd5u\t\x9a\x17R>L\xd7#\xe8q\xa8\x8f}\x888\xee\x80@\x82s\xab\xf1\xfb\xa7_\\\xc3\xefl\x10C\a\xe2m\x8f\xfd\x11\xf2g\xee\xa8\bG\xa1\xfb\xadA\x84u\x1d\x12\xcd`j\x83\xc0\n\x90\x9d\xad\xb2bV\xec\xbb[\x8dy\xb9\xd0\xb4L\xee\xad\x06\xab\x0f\x1eH\xc44\xce\xdb\x81\xc9\xacY\xf0\\\xad\x035\x81\t\xfb\xb2\x9c\x1a\xbb\a<\xcf\xeb\x11iS\xef\x97\x1a\xd5\x17z\xae\x1e\xa2\x0e\xf8?\xcd\xde\xc8\x86nc\xe7\x91bA\xf0\xfc2\xe7\x93[\x9a\xe7\xd7\xc8\t\x83\xb1\x90t\xa6~\xb4\xd9\x9f\x1f\xd4\xdaY\x82Z\'\xdeu\x04;\xf8:'}}, {@appraise_type='appraise_type=imasig'}]}}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x464082, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000001c0)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x101, 0x200001) write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000300)={0xa, {0x9, 0xff, 0x3}}, 0xa) ioctl$SOUND_MIXER_READ_RECMASK(r5, 0x80044dfd, &(0x7f00000002c0)) r6 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r6], 0x0, 0x0, 0x0}) 21:51:08 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x8, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) [ 2008.180656] binder: 21959:21962 unknown command -1 [ 2008.195961] binder: 21959:21962 ioctl c0306201 20000080 returned -22 21:51:08 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000000)) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r2 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x1) close(0xffffffffffffffff) syz_mount_image$ocfs2(&(0x7f0000000040)='ocfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xd12, 0x6, &(0x7f00000025c0)=[{&(0x7f0000000180)="9c5a55048df1282b5e463ff03cb0cec87ae7b014f09299114bcbd9510cbbb12ffd95f68314328b705292938bb1806cfc53a93dc88e6d2dacfa4953666320b6d27a682c07618a4c50936730dab5e2bbf11b10067e8a2ad8abd3082c89e52722a577303450d09fd9ac867aa3ef71d7ef54e1aefecfa1914e8e5a7cd28c72cd86fcc920bb64f611c5497b45ea16ca67221fc13bcdd1f4e027c208556ecdc98517eda4b860ec5ebc859314ae5453ff19c47f8ae42a6054952065903cdf61f32b110567dd1e929afde4b6d8d249259adf8602054a3a3d0c189b6587acf881291770bab59b65b600", 0xffffffffffffffd0, 0x6}, {&(0x7f0000000400)="580bdae35899cd626a48d6e49088bdf2ef11d7153dc3478e96138ebdf7447502665bad9fb6c206bce434a658f3027c12ff87a52271a2ffec2bb84833d37e25bcdad101cbaa9b6fdd3a8b69622682438797e8bd370c4afa7f94720989fe97bf848e9cc47f211dadf8f8a83ba0ae54453fb920721fef66ef92218f01b16bc6427d7a71324d3e870a240fca467ef4547fd899d17935bb7be9eadf1d88b1d89b7c9bd88f35941c3654db54d76e8b310de763c59495cc2896f4d716ac743a417079b38b3751bd46dcb39dde1a04a9dc296d620bc753f017d0394f8cf4d390ec3f6c6660eb0d1b5271134c2ae5a30a48e8f50ca0e81f3f1b7af8d53c512d0094d7ea5d28c7506d6ef0a241a217b2d9da4e3414f6493c0e9a3d2bd91c0d08932761a2f23e1e6ef007b3d390a6deb58a5bdab9b748148f103a83030f4aea09e2f667c92091f612eb3409d64e159735d7c26351661d0ab8e6aa2145faf16bf630084d427e59b368a2182a230d9b4b85c61ee5c9e2ac6c8260da76223aea21d49ae7ed4582f088e8ec079f7bdf25bba14d7d45184e392ba12fe2350a1f579a3a981187e0315906cdcddef94377580cca82fb2c01e0bc8e61affd483eb565a12802f362e79d468186b1dd2e157f02ef5847426ef95edaaedcc8ed7b2c833db7c68b248018de3afa1b359e15a0dbe1da822d0dbfcbde33e6e7d63c0dd60a5def2f1e4f33febf74c208e07ae84becb56413355502a4b3e240b5f525cfdc00fd27aac7882ea1332dbac9c6f2c59e806e3d7298d007c3961e4f23d6cd26466e8e8b958d5da5005397ce16955a75c00f27e54f908feee9f33701b1c88799bfd7c1921d9cae9d7faa72f8ee11807884b042c84f87b8c640318f31c8a66560b8ba212a087d0b93e72f3e590b3823e033066f907ac79d63ff450995aa5a8f068ba7986dee75cca201f2203bf74bca511245aac1fc611b550f771a163dd918d878d8e96196c81abbb0907c810d82cdaa40375ea141d65738a2a1bdb8a17617cdc1370e04a0c30e84eb74d00dfb1b4ff8a03c4d8336badfa359b2afb330d7b087007ff86a8c5bc98a5ba46e697b030d90e92ae1cc7a612c3797c454098f30776fc061992a9e55a6ceb530eb34fdfbd2d86dbb1a02d187f0f591adfa81aae1972c152a7441cd5fd83c6d24812b6b7647e17370543195dd7552b1a03cb60d320f534afd6154e6e368794b12bb886e20b829db62ef746bf7eae3b276f3ae06894eac52a0be4b5b77e85bb87e4ffe22d05939f05f99d6b56457c44b2f43ce6945bb26ef7ef07872702e6783913c1b81df636555a13fce45b1d91d091efdd821a26d104c04b0a1f105ae5dd3692a82b856033be614236f28b5ade39d5dfcffe1e7f9efe42b58323c29c39cba9329a6a5a81593ade6f2b0511e0926d324a0713cde515a18f7d6881c4742bfd5b2b97c810ed0f4ff588bc3ec8887ca6a1832cf18784c4b464fcb09ce6ec314d4dd45dbba6c5f8deec250f171e0c3a02d90dec8fceb76ff5cab73e18ef50809d3cba816b649f63808f605f76fda1ea41ba10a6802a7841decd05f8350e511731226634496881a5a400061758a3ce60c2d2e52707d94ef952ad9899a3bf3268b16e031bd75f84eec2cc0dd31e42b7facf2d7ce73d4f0f6a0a87eea2e6312095818e2fe5a63c4bb7c3617634009025e175bbb92ede30878223d16335c6af34f59c77b16ece9a21bf1c18ecc0028aacbee8e639bf3281eb6bcf6073e2cec33489513dcb7073704c82df554bbd2f9d98cc3e2c429d40134afa13a4554e1261dc00b19f35f97bd072f649fc2b8d3e9389c5237efc8f65599e748cce9ba228b0743385ae7994052e5228d82a4f10de026a666b59296e651d23a21c4fdc7f1b58065af14fe9ddae44ce4163baa2ea99b6e9961bb837fd8ee67d0f6b70060915238647948890a866c0f376d48cd9ddae47d1ca838672ff2740ef8dbbcd92affca300b9c3c19624f6c506d5c5045dc5b212ce9b8381161db9e0d246416a102ab90bc68edd0730239e91cd26910fcb0800cd964bbf854980b8c72170579976b4a24717baa291643010e9c3254842c8b9f5454d701cfbb291c76374f6d927fda28781106846dde62bec38257a61b90ddf39044f894c456aa214df32bb8abe5cc2d42284110541fdfaab3649a04427a139993ff3bc92916cc81392a187c684f64aad8989570bb6272804d59d5cd5cef58e2d738ebe19557e67a284bd407b8dbd72d36a3c261f9de393b8e6765e707b7ae180fbfa638d3b570dab835a6fc0e11324bf0de2e6f1474ff01e6be5bcf4f43c34d1ad902cf917b5923feb85a7ebd14d76c49a891f1867d42ea5fd49be79e0ccb9ce08ed1392c1be15f3be24fc907c3266a512a35bd84e128172595452c5a1b987186af61848fdbdc05e16e3abe3a707f00661e4d76e15c982f94a7cc5706db0cf6860a7ea9d87c87c196fd315c2d0ec6c6937be0ede100799f15c5247b2e70b0be54f7bdf85b3b5137aeb922ff2506be41069a9c1176c2b10de5086f62cf0f26d62fa13f9ccce70cc3b22c87d71b76d77e8de25802444003b623541cd90b35508d54a38624d357559b9e0315ccd59b1b451620cefebd4c5f1e7ff178c95b73aed107c367a52522b33a6f3e08a02c5c98d436d0cac02c334c2ee1e89945bfc6e41c838d30655fdc6b559bce0728b809654f545e125db62bbbab082145dd22ae21b792f00e47841c6493bc99f55fe565fe811c453de537caf5c5ab1ff98b73366dc2d8ea8cf04003b9167ef58cfc2dbbadeba9ea29a90d9a61491419db828bd84b647d83c785de114e0d3d8c83883131dad72792a6bac23bcbf311035a82a1096ae8f27c3319ff43dc17ac3a293a1d301b417bbce48e6c5e753b53802333fbd587cb1a6a5695660fce3e7ffc0ee8fa3b594a48ab4b69b20fe91b60e4800c03a6162bd264e428be6e5d79ee72c2af59e55dc89e5b28f4033515181df6aa315cb28fac890fb49255686dac11aba924af28a1f1f948d3bcc405cc669f0a424b1a40f52bd47199f3d6f8b58659f96402952371bdb419feecc7d15db8ae719b641711ec3c883f40a7b49ca6e4f7dd28feb9fadb585b55520726bd58f3fa2280fd17937e0e40c37d119aa8a4aefa511c079da6825da0065aa0654005a0d5dac5db40f108c7c4acbaba2466bd5f016f9799966344940c0f744d0220fbaee1d9742195fdcebb65f8cbd2d5a49b07d661cd6246c874bb12273ab7fa275a01adf1678356b5a1a1f0dc407369486357a98d3e5da37bd5ede967e138f2ff3e62e64c5315c40731e054c65524e539d17f199141ad1bc96ca9a6b251c629370e733e12eef01f0aa3b2c05c53832f556cc3d240f5cf371bf4954726212a55067552b5800d7833d6ffd19339e49fa3d1c97f9226e15dc2f2be820e2d74de34daaed8db75d36f37e6b0c6603b3ed1441d6cfcbcc43d70ff3356035c563efef413ba25d570a7847167cce21bc2fa7729d9f8c83103c2ad59af68b4de0a83aa44e7d686969497dbce82c206ebd16cb97dd196a06edc027ee5a5415d25d60a70e6e012c680474dba47b81bd7841b56f96a67b4b847d7395986947eeb00a2dd039ccb694627cfec4199b38a4ca59f187bbbb43ed9f739ee953f04a04b8c19854e0dca917870850fca35efdf5371b0ecbf49400c7cef69d485479fde5872fb811860b12de3837413e3b785b15f26dacb5109054fbaad674d0b203b4b1f6fa5eabfe1a590c044f674f1a4bfe60f009ebc873a2445f54fc46907b38d20477ddfa396af8dec29641233e404d81d91e6f256324d92539c4b9d242c5495ae4f21882f410759368af267f599238fe0e01211e9936661c0ccd17e9457ad1359c62bee7ebf7df63f97d2744fddee4edb3d2678fe5aa2f96e2f7ffb962cfe3f3f7620e9bd348bda8945110a411a8fd2e2c99d657ebf0d8cc509a3a94506b52310762cd7227cb7c25aafdbc8d450ed04a2bfae7eb378ab417a649843d789e71c112a5300407ebbc15413b4bc142e8648cb65f746d4aab5cb2993e7081ea62d7a84ec62e6feefe045efee56638a6a82155a43503ece57bcfbb9034551d659ab2b40c4876092c6786407fcac14eba3c1c2dc3cfbaf19530845fc3a4d8253186c7aadd076e1d6ae8679872b41a3d92d0ee46d750ed20389d0810c05bba5c04eae7081c44438b87f6a5b0592af3a8e4436f8476fab740c5e96741d09cbe8372db518242806343c3e99dcb4764ddef7c72dace5ecff0f8e22904775d2beb3d111cfadd0e96a9a57333451d249a4536acd12ae05a0b15ebb0252f7d646094f7b404de5d53f1fdb6472d3c8b29a794b2db76e81062c39274f4c55af8b8bb39e762dff55b981ca3128f86081c710f82f1ea60baa22fcfcc0b9bd4f5161c3efb63afad4c7a6f13c01b7ba8bc791aadb35c3665f49510907b9df685694fe37c58fbd11fe00015ae62e416a222642e0d33192700c3578e6649fdb4e7ab63efe359ba92aa8620e695681fe261d9abd6cc05d4d89074cce1e8163a120ef93f57695162821cced3de0708feb643afe64907acf8878d460d0a89f0f89c285ba16b3fafc46ae7f8217b6149534ee03273461ff3fdadcec9b2724c6c2bb7663dfd1033ab6e6aa544df462cba3a63daf7d70dae4f298d6eaed3eb7dcc0cda4c588ee1ee7c97fbf62c1fd2629e0a0c35b8882c9aefee99fd02ec5e850086fcad4939483190da2dacbc747311bb8e6cc4395475dff027c647bdb92dff9c88ccbf2ceb1470c8e5c1de54a2142e6b9f44498d99673cd31d0c9ccb6914357bbc1c44650d03553203b788970bf7ee02935962bb043d9ff9adfaa15a1c0afd99aa6edac9c8ada23abbb7a8c1e60cce6a41d970fcecaf2bb4ac9307373c805b02b2bb3f2472da475de047a048b3830047f538165de824bda1f81aa3726318d1f3ee6a760f402a9e1512833a31525570931d602268cb6c2c8e5a008715bbf13662de93c33ff6281e4535746569a6c9e069c7042efea0a12a714e4f58fc2c20235cf2c76bebc832b7fa54047476cb282ef943f3800cb1b9d59750db6b8aa30a99b353f363778924eb2e52c9eb7f456cc1c8c4708a6890ae16210d5cf87b0b44740a9db7713b9670511d1144b114cc4fd7950fcc11cc517559a775c6eccebebd2a1a2bc463c6f1fa0c249721eafa1f5b01fbb2d948cf9ea498081d8aaf9909cf9a52f768b45b63cf67875c7df00ce228ae10192076f73ad830a4251c725af1a5c8ca0626de87092baa8f5449df81965040767e6b67b83f108da384563c356953feae4e8aa16641548db983080ab388117bc61a909cea3d4d5db74c135691cfc8af6e57f50b9648bec5d7110486a7fc51594645406d7f06c22df31dd5f9324b8ed02a8bc5fd5e5619f29cf35b0e2cda2339220346775234dfdfb081d15a8171451927957c5f2167e159aa0248c38d060443ed023435e6bda918d8cc11939de191c8ed803aae8778d449748bb291d7c127febe6e78af484934cf8a9a7fe395003a0bd47f5c2490ae3fe1f1a37be30ca1214b3416517cfbe38ce9eabe8424c758a46b98e860228207c0457235ca37241c1b7b18cfcb9218d143cf9f4da43ba93ad1c536dcc85d520bbba11665f371246f2011681e4fa467fe460eb79bf1154895dbdc0c92b2d064bb9442915b1cfd383d47569207a145b5a3e15e2ba4246216be75ab2634e55a6587ef88197ef4e53c9e8e22f147c8f1f8356463627a283bc33857541c018464d0495e201e3ace1ebcb55bd6c552a223e57", 0x1000, 0x200}, {&(0x7f0000001400)="c27179c8945b77cd2e4e233cc12acd6e1d83687b7d51a8d946fa3aa895e8f8e3c672280d5742c1edbee4e5d318b3a57d1fb9ff1af394f28a34597c3d4bece07f484e185da64777b012f138f1ee6aebd2f235fd80f58d64a73d732d", 0xfffffffffffffde6, 0x100}, {&(0x7f0000001480)="9c90610debb3cb499f36a341a6d301972c8b3202de142cf2e353268901618d0310728893250d0d3feb8f7f90276d502fe94aed7655316ed52b22fd1993a4d2c8206a661fa7a95d976eb34a3a7d79ed5db826f1953ac602c0ab5f707d7aa4dfabc0cb9751b68ba99a431544f6c95c456abdc954dc883ad25e", 0x78, 0xdca9}, {&(0x7f0000001500)="3dff3c7bc59a9d22378ddd277693ca3f0d6f1a46476f38800a3fa155ff408654a00cd4f02a24a5592b17231b829637304da9a31059a5dd2657650203b934e2dd9437b80b831315ad0d782bc62ee447afe3ccf0c244663d6c937fc7765fefd8f592b3038f2d20188f131168837fd2c99474ab1b0f4e99067e3d656b8cc3720b0c7941dd98b909c0c9a5b27e6d36d6076bf39a7775e4837e4fc0d07fd6ab80a419779a27d056106066a574e84817f89406d5", 0xb1, 0x2}, {&(0x7f00000015c0)="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", 0x1000, 0xfc0}], 0x1000, &(0x7f00000002c0)='(}\x00') io_submit(r1, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000280)="04", 0x1}]) 21:51:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xfffffffffffffc19, 0x0, &(0x7f0000001740)=ANY=[], 0xffffffe6, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="066304400300ffff00000049afc66afcd82d4cc1c8b733062908c32816055f7af7993eb500"/69], 0x0, 0x0, 0x0}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000040)={0x0, 0x3}) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3, 0x0) 21:51:08 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) renameat2(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x4) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r7, 0x10, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x100) write$binfmt_misc(r5, &(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYRES16=r6, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r7, @ANYRES64=r1, @ANYRESHEX=r0], 0xfffffdcf) r8 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8fff) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x2, 0x0, 0x10003, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r8, 0x40206435, &(0x7f0000000180)={0x0, r9, 0x10001, 0x4}) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x23) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f00000001c0)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) ptrace$cont(0x18, r4, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x100000003, 0x37}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x7, &(0x7f00000000c0)={0x2259, &(0x7f0000000040)}, 0x4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) [ 2008.480294] binder: 21973:21974 ioctl c0306201 20000100 returned -14 [ 2008.507524] binder: 21973:21974 unknown command 1224736768 [ 2008.515449] binder: 21973:21974 ioctl c0306201 200003c0 returned -22 21:51:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:08 executing program 3: rt_sigprocmask(0xe51f79a0702637db, &(0x7f0000000000)={0x7}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f00000000c0)) 21:51:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x8000003}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:08 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) 21:51:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) sendmsg$key(r5, &(0x7f000033efc8)={0x0, 0xffffff7f, &(0x7f0000aa8000)={&(0x7f00009b9000)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$IMGETDEVINFO(r4, 0x80044944, &(0x7f00000000c0)) setuid(r3) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x22800, &(0x7f00000002c0)={[{@mode={'mode', 0x3d, 0x3}}], [{@uid_gt={'uid>', r7}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/binder#:\xc3\x86\x81\xd2\xd9C\xb3N%\xb1D\xcbr\x02\x00\xa4Fv\xc0\x99~&[\x19\x81]p\xf2F\x11\xd7\xfa\xaf\xeaP0P\xf4\xd5\xec\xe0\x86\x06\xd5\"NT\x123\x8f\xae\xbc[\x13q\x9d\xd9\x9a\x8e\xd3\xbdQ\xed\xe9\xd6\xfe\xe4\x13J\x00\x00\x00\x00\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/binder#\x00'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x7, 0x0, 0x34, 0x66, 0x66, 0x0, 0x64], 0x2d, [0x66, 0x65, 0x1c, 0x31], 0x2d, [0x61, 0x61, 0x79], 0x2d, [0x0, 0x65, 0x35, 0x65], 0x2d, [0x63, 0x35, 0x0, 0x31, 0xa4, 0x61, 0x33, 0x31]}}}, {@hash='hash'}, {@appraise='appraise'}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xa8, 0x0, &(0x7f0000000300)=[@request_death, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/114, 0x72, 0x2, 0x3d}, @flat=@weak_handle={0x77682a85, 0xa}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/155, 0x9b, 0x2, 0x10}}, &(0x7f00000002c0)={0x0, 0x28, 0x40}}, 0x480}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:09 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0xfffffffffffffe41}]) 21:51:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000300)=""/115, 0x73, 0x2, 0x37}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/56, 0x38, 0x2, 0x25}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x1600}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/create\x00', 0x2, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x92, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440eaf6ce8ba34ba03ef08e0eb75703fc7a5d12a6953dc2c21af80bd4116020019faf054fffb47d44dd57d7d0d0c629ba5313de395f73178418ddb89474a35edad26409a93060df1175e773a23002276aab3d69f7ed7aa3af09aba6ad63f99cc123a593327dbae749862af9a9bf8d8fcbb5fe2dc6df763c84564576e727210cef2ab45b829bded9422fb9ae75250000"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$packet(0x11, 0x2, 0x300) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000040)={0x4, 0x1552000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x12, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], 0x0, 0x0, 0x0}) [ 2009.339466] binder: 22026:22028 unknown command 1050692515 [ 2009.373497] binder: 22026:22028 ioctl c0306201 20000080 returned -22 [ 2009.440110] protocol 88fb is buggy, dev hsr_slave_0 [ 2009.442724] binder: 22026:22028 unknown command 808482864 [ 2009.445355] protocol 88fb is buggy, dev hsr_slave_1 [ 2009.456079] protocol 88fb is buggy, dev hsr_slave_0 [ 2009.458135] binder: 22026:22028 ioctl c0306201 200003c0 returned -22 [ 2009.461221] protocol 88fb is buggy, dev hsr_slave_1 [ 2009.473139] protocol 88fb is buggy, dev hsr_slave_0 [ 2009.478268] protocol 88fb is buggy, dev hsr_slave_1 21:51:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8fff) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140), r6, 0x0, 0x2, 0x4}}, 0x20) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) 21:51:09 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x6840, 0x0) accept4$packet(r2, &(0x7f0000000040), &(0x7f00000000c0)=0x14, 0x800) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) 21:51:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1efbce72"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06630440030000001163484000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072f4d675c1752529a7435429af10b991a494cd32eac2b1cc5f329dc963c66e93"], 0x0, 0x0, 0x0}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200001, 0x0) dup(0xffffffffffffffff) 21:51:09 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockname$tipc(r2, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x23) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x100000003, 0x37}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x7, &(0x7f00000000c0)={0x2259, &(0x7f0000000040)}, 0x4) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) 21:51:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:10 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) setsockopt$inet6_udp_int(r2, 0x11, 0x3f0285dbbed1ef5c, &(0x7f0000000040)=0x8, 0x4) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2, 0x0) tkill(r1, 0x23) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x100000003, 0x37}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x7, &(0x7f00000000c0)={0x2259, &(0x7f0000000040)}, 0x4) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 21:51:10 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x4, 0x0) sendto$unix(r0, &(0x7f00000000c0)="b014f92facb77a5062c8758d9607c6d25758f86ca6bd66143d8e3fbad97519f4952b2faeff6d5d05dbc88482af276f4aeac3ec2b874fae42d1c8df1becd6c13f644aa02913bc9e56225e2accb9d3", 0x4e, 0x20044012, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r2 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) io_submit(r1, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000280)="04", 0x1f4}]) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, &(0x7f0000000200)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000400)={{0xa, 0x4, 0x9, 0x5, 'syz0\x00', 0x70d}, 0x3, 0x40, 0x6, r3, 0x1, 0x20, 'syz1\x00', &(0x7f0000000040)=['em1.\x00'], 0x5, [], [0x3ff, 0x40, 0x5, 0x4]}) 21:51:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ustat(0x8000, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="066304400300000011634840000000000000000000000000000000000000f7ffffa705952941fac1d2f570e048896557866aad596de1a64be042452e4a6c000000000000000000000000000000000000000000000000000000000400"/114], 0x0, 0x0, 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080), 0x4) r3 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x8000) r4 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000340)={0x21, 0x3, 0x0, {0x4}}, 0x21) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @empty, @empty}, &(0x7f00000001c0)=0xc) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/load\x00', 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000400)={0x5, 0x100000000, 0x6, 0x1, 0x3, [{0x8, 0x7fffffff, 0x3, [], 0x2400}, {0x8000, 0x40, 0x2, [], 0x2}, {0x8000, 0x2, 0xffffffff80000001, [], 0x3400}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000280), &(0x7f00000002c0)=0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000680)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000000804000010020000000100000000000020030000200300002003000004000000", @ANYPTR=&(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000000000000000000000000008e7e3300"/64], @ANYBLOB="000002d2ffffffff00000000000000ff0c09aaaaaaaaaa2200000000000000000000fe0001ffffff0000000000000000000000000000000000000000000000000000ff00ffffff14000000000000000000000005000600070002007f80006970366772657461703000000000000065716c00000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000050000000c0000001000000000000000000000000000000000000000000000000400052415445455354000000000000000000000000000000000000000000000073797a30000000000000000000000000400500000000000008000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaaaa00000000000000000000aaaaaaaaaa0e00000000000000000000ac141419ffffffff04000000ffffffffac14140bac1e01017f8000ffffffff000f0000000000000000000000000000000000ff0000ff00ff00000000000000000000fb11ca14e5f400000000000000000000ffff80ffffce000000000000000000000007a78d000300050001000476657468315f746f5f7465616d0000006c617062300000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000020000c000100100000000000000000000000000000000000000000000000050006d616e676c6500000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffff00000000000000000000000000000000000204000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x458) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000380)={0x0, 0x1}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000600)={r9, 0xffff}, 0x8) getsockopt$IPT_SO_GET_ENTRIES(r8, 0x0, 0x41, &(0x7f0000000540)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000001000000a532312acbc82821af767272a55724b73e29ca30bcfeff1f196db6a08ff70b30fb1990f66fa4e6b6e742efb6a7db2b0e9f3c6792816c9141af4481ddee48c0424dcb8cd9042475bcbe190b7620830f9fa67212f229"], &(0x7f0000000500)=0x25) bind$can_raw(r3, &(0x7f0000000240)={0x1d, r5}, 0x10) 21:51:10 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x17b) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) [ 2010.160111] protocol 88fb is buggy, dev hsr_slave_0 [ 2010.165320] protocol 88fb is buggy, dev hsr_slave_1 21:51:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8fff) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0)={0x9, 0x400, 0x2, 0x2, 0xf8, 0x1f, 0x3}, 0xc) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000080)={0xb6aa, 0x40}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440fbfa7863a79ce3300dd08c5d79e8957780ba49c64d867a202294f8"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e630c40000000000000000000000000066304400000000011634840000000000000000000000000000000000000000000000080000000000000000000000000000009000000000000000000000000f0ffffff00"/100], 0x0, 0x0, 0x0}) 21:51:10 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80860, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000040)={0xf, 0x1f, 0x2, 0x4}, 0xf) rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r2 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r1, 0xb0, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000280)="04", 0x1}]) 21:51:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:10 executing program 3: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @broadcast, 'bridge0\x00'}}) rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0xd, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r2 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_setup(0x8001, &(0x7f00000000c0)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000100)={0xffff, 0x8, 0xc6674956bdc074f0, 0xffffffffffffffff}) r6 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0x323) r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8fff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r9, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) r10 = fcntl$dupfd(0xffffffffffffffff, 0x0, r9) io_submit(r3, 0x3, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0xa40d, r5, &(0x7f0000000180)="62d7ea258eface08ded960040c0d4356f31c7064ccf7132b98da32ada43860656f1f47cf633c3d88b1427f0884b2866b36d22340349cde6162c46c8323fbdb3e49526a265314f5512a7affbafea5d5ae814650a378547103c9022a0a33039f15409b", 0x62, 0x6, 0x0, 0x5, r6}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x82, r2, &(0x7f0000000400)="949a817072a8ded7d199c0f6ce9f4709f9e7ecc32642dcb4d714ea98ff886bcf10494358a317c9940edfc1a77927c3addae66b5fdf37ed27954f62f2a521ef127039ff298894716cf531c439c03a1dfcf3af8ef33dc3e999a460e5e395fe18ff2496b1438b7cc3bc338ad59184685ce52f63411dd7b9dfadb05bd7778291bb65e1fa3f3f3a2f613519972683b7eb09f2fce942b3c4085d7bc0a6ce5c359784ab5992b4f7de6edc9941169feeec8622ecec76a7dd78938eafde", 0xb9, 0xffffffffffffd9fe, 0x0, 0x3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x28, r8, &(0x7f00000002c0)="503b58fbc2c7d0", 0x7, 0x2800000000000000, 0x0, 0x0, r10}]) io_submit(r1, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000280)="04", 0x1}]) 21:51:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1ff, 0x60140) getsockopt$ax25_int(r2, 0x101, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x8, 0x0, 0x2f}, @flat=@handle={0x73682a85, 0xa, 0x1}, @fda={0x66646185, 0x6, 0x1, 0x4}}, &(0x7f0000000180)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 21:51:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$BLKFRASET(r2, 0x1264, &(0x7f00000000c0)=0x7fff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2011.418745] kauditd_printk_skb: 16 callbacks suppressed [ 2011.418754] audit: type=1804 audit(1577137871.551:8877): pid=22100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir591060983/syzkaller.OuNs5A/2330/bus" dev="sda1" ino=16946 res=1 21:51:13 executing program 5 (fault-call:7 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dr#\x00', 0x0, 0x6599752e22465f0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00a796"], 0x0, 0x0, 0x0}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_dccp_buf(r3, 0x21, 0x80, &(0x7f0000000400)="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", 0x1000) r5 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001480)={'nlmon0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000280)="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", 0xfd, 0x0, &(0x7f00000014c0)={0x11, 0x8, r6, 0x1, 0x1f, 0x6, @local}, 0x14) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000000c0)=0x200, &(0x7f0000000100)=0x2) r7 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x80, 0x3f, 0x9, 0x2, 0x0, 0x6, 0x40021, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x10000, 0x1ff}, 0x725, 0x2, 0x1, 0x0, 0x9, 0xd0d8, 0xf67}, r7, 0xc, r2, 0x1a) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0d350440"], 0x0, 0x0, 0x0}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000400)={0x10001, 0x9, 0x0, [{0x5, 0x0, 0x5, 0x7, 0x2, 0xfd, 0x2}, {0x7ff, 0x78, 0x7, 0x7, 0x0, 0x2, 0x1f}, {0xffffffff, 0x0, 0x80000001, 0x80, 0x1, 0x1f, 0x9}, {0x4, 0x7df, 0x9, 0x0, 0x1, 0x1, 0xa3}, {0x40, 0x5, 0x5, 0x0, 0xc1, 0x0, 0x7}, {0xffffffffffffff81, 0x1f, 0x3f, 0xb9, 0xff, 0x7, 0x6}, {0x8000000, 0xffffffffffffff7f, 0x4, 0x6, 0x8, 0x7, 0x2}, {0xffffffff7fffffff, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x17, 0x3}, {0x1ff, 0xfffffffffffff4fc, 0x7f, 0x4, 0x7, 0xe5, 0x4}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8fff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000002500070500000000000000001a0000a6", @ANYRES32=r6, @ANYBLOB="0000ffff0000ffff000000000cb40100677265640000000004000200"], 0x34}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@loopback, 0x3f, r6}) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:13 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) rt_sigpending(&(0x7f0000000000), 0x8) [ 2012.995071] binder: 22117:22121 unknown command 1074017549 [ 2013.003514] audit: type=1804 audit(1577137873.141:8878): pid=22120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir509740448/syzkaller.yA8vW3/1150/bus" dev="sda1" ino=17314 res=1 [ 2013.015110] binder: 22117:22121 ioctl c0306201 20000200 returned -22 21:51:13 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x1c0000, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000200)=0x8, 0x4) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=0x2, 0x4) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000001c0)={r4, &(0x7f0000000180)=""/53}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) [ 2013.056708] FAULT_INJECTION: forcing a failure. [ 2013.056708] name failslab, interval 1, probability 0, space 0, times 0 [ 2013.068602] CPU: 1 PID: 22125 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 2013.076523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2013.085893] Call Trace: [ 2013.088511] dump_stack+0x142/0x197 [ 2013.090780] binder: 22117:22121 unknown command 1074017549 [ 2013.092164] should_fail.cold+0x10f/0x159 [ 2013.092225] should_failslab+0xdb/0x130 21:51:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000300)={0xfffffffc, 0x401, 0x3, 0x1, 0x6, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x40000, 0x0) read$snddsp(r3, &(0x7f0000000080)=""/115, 0x73) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x8000, 0x880) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) r6 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0x323) r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r8 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0x323) r9 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x8fff) ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, &(0x7f0000000380)={0x5, 0x3, 0x2}) sendfile(r6, r7, 0x0, 0x8fff) ioctl$RNDADDTOENTCNT(r7, 0x40045201, &(0x7f0000000340)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000400)={{0x8, 0x0, 0x3, 0xfc73, 'syz0\x00', 0xf8}, 0x1, 0x30, 0x1, r5, 0x5, 0x1, 'syz1\x00', &(0x7f0000000180)=['vmnet1\x00', 'vboxnet1\xa8(system#system}cgroup\x00', '/dev/btrfs-control\x00', '/dev/binder#\x00', '/dev/btrfs-control\x00'], 0x59, [], [0x8, 0x3, 0x1, 0xe1]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2013.092238] kmem_cache_alloc+0x47/0x780 [ 2013.092252] ? save_trace+0x290/0x290 [ 2013.092272] dst_alloc+0xf3/0x1a0 [ 2013.098432] binder: 22117:22121 ioctl c0306201 20000200 returned -22 [ 2013.102078] rt_dst_alloc+0x73/0x440 [ 2013.102096] ip_route_output_key_hash_rcu+0x731/0x2750 [ 2013.102107] ? check_preemption_disabled+0x3c/0x250 [ 2013.102127] ip_route_output_key_hash+0x1c0/0x2e0 [ 2013.102138] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 2013.102148] ? trace_hardirqs_on+0x10/0x10 [ 2013.102160] ? check_preemption_disabled+0x3c/0x250 [ 2013.102175] ip_route_output_flow+0x27/0xa0 [ 2013.102186] ip4_datagram_release_cb+0x5fe/0x9b0 [ 2013.102197] ? ip4_datagram_connect+0x50/0x50 [ 2013.102205] ? lock_acquire+0x16f/0x430 [ 2013.102223] ? ip4_datagram_connect+0x50/0x50 [ 2013.102235] release_sock+0xba/0x1b0 [ 2013.102246] do_ip_setsockopt.isra.0+0x29e/0x2af0 [ 2013.102258] ? ip_ra_control+0x3d0/0x3d0 [ 2013.183391] ? avc_has_perm+0x273/0x4b0 [ 2013.183411] ? lock_downgrade+0x740/0x740 [ 2013.192320] ? avc_has_perm+0x2df/0x4b0 [ 2013.192333] ? avc_has_perm_noaudit+0x420/0x420 [ 2013.192346] ? perf_trace_lock+0x109/0x500 [ 2013.192359] ? save_trace+0x290/0x290 [ 2013.192371] ? SOFTIRQ_verbose+0x10/0x10 [ 2013.192386] ? __fget+0x210/0x370 [ 2013.192398] ? find_held_lock+0x35/0x130 [ 2013.192411] ? sock_has_perm+0x1ed/0x280 [ 2013.192421] ? selinux_tun_dev_create+0xc0/0xc0 [ 2013.192431] ? lock_downgrade+0x6f2/0x740 [ 2013.192502] ? selinux_netlbl_socket_setsockopt+0x8f/0x340 [ 2013.192514] ? selinux_netlbl_sock_rcv_skb+0x430/0x430 [ 2013.248342] ip_setsockopt+0x3b/0xb0 [ 2013.248358] raw_setsockopt+0xb3/0xd0 [ 2013.248374] sock_common_setsockopt+0x94/0xd0 [ 2013.248389] SyS_setsockopt+0x13c/0x210 [ 2013.248399] ? SyS_recv+0x40/0x40 [ 2013.248411] ? do_syscall_64+0x53/0x640 [ 2013.248421] ? SyS_recv+0x40/0x40 [ 2013.248434] do_syscall_64+0x1e8/0x640 [ 2013.248443] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2013.248460] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2013.248473] RIP: 0033:0x45a919 [ 2013.257468] RSP: 002b:00007f4aeb0eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2013.257482] RAX: ffffffffffffffda RBX: 00007f4aeb0eac90 RCX: 000000000045a919 [ 2013.257489] RDX: 0000000000000015 RSI: 0000000000000000 RDI: 0000000000000006 [ 2013.257496] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2013.257502] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4aeb0eb6d4 [ 2013.257509] R13: 00000000004ca390 R14: 00000000004e29b0 R15: 0000000000000008 [ 2013.270235] audit: type=1804 audit(1577137873.211:8879): pid=22135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir447032748/syzkaller.bNKEoG/1592/bus" dev="sda1" ino=17345 res=1 [ 2013.287329] audit: type=1804 audit(1577137873.211:8880): pid=22135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir447032748/syzkaller.bNKEoG/1592/bus" dev="sda1" ino=17345 res=1 21:51:13 executing program 3: rt_sigprocmask(0x3, &(0x7f0000000000)={0xfffffffe00000001}, 0x0, 0x18e) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) [ 2013.299043] audit: type=1804 audit(1577137873.211:8881): pid=22135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir447032748/syzkaller.bNKEoG/1592/bus" dev="sda1" ino=17345 res=1 [ 2013.440393] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 21:51:13 executing program 5 (fault-call:7 fault-nth:1): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) [ 2013.466309] audit: type=1804 audit(1577137873.601:8882): pid=22138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir509740448/syzkaller.yA8vW3/1150/bus" dev="sda1" ino=17314 res=1 [ 2013.515407] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2013.538753] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2013.577442] audit: type=1804 audit(1577137873.711:8883): pid=22137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir447032748/syzkaller.bNKEoG/1592/bus" dev="sda1" ino=17345 res=1 21:51:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x50, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x180, 0x3}, @fda={0x66646185, 0x2, 0x2, 0x3b}, @fd}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @exit_looper, @release], 0x78, 0x0, &(0x7f0000000540)="46125067990ce1fb14e1cede291c79d0ae4e9d13a64ebc6758c042b835493b498673e85a53857622cbb2ff85fc1d8c94ed174284f7c0ce2bf19dbf7ae95426d06a0145261d07eb687232b2bc552305cd912bf2d70db8a1a30ed69f3797e47c926721c80f43108b67ff09a4489f0254db14e3a608dc291e90"}) write$binfmt_misc(r2, &(0x7f0000000600)=ANY=[], 0x0) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) r4 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r4], @ANYRESOCT=r0, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR, @ANYRESHEX, @ANYRES32, @ANYPTR], @ANYBLOB="4367d9acbb520d01d2ec0c4df07816530226afd778590ddbd6471049f6a24548c1e8c17a59c9193457578080ccb4dd6f5465c113522b41", @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0, @ANYPTR64, @ANYRES32], @ANYRESOCT=0x0, @ANYRESHEX=r5], @ANYRESOCT, @ANYRESOCT], 0x246, 0x0, 0x0}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400840, 0x0) recvfrom$unix(r6, &(0x7f0000000080)=""/4, 0x4, 0x163, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) [ 2013.621812] audit: type=1804 audit(1577137873.751:8884): pid=22137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir447032748/syzkaller.bNKEoG/1592/bus" dev="sda1" ino=17345 res=1 [ 2013.652390] audit: type=1804 audit(1577137873.751:8885): pid=22135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir447032748/syzkaller.bNKEoG/1592/bus" dev="sda1" ino=17345 res=1 21:51:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x355, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x0, 0x0) 21:51:13 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x180400}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x1e0, r1, 0x420, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffca}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x35}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff7ad6}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x24, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffff28a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040001) setrlimit(0x1, &(0x7f0000000140)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000)={0x234f6da8}, 0x4) io_setup(0x3, &(0x7f0000000080)=0x0) r4 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r3, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000280)="04", 0x1}]) 21:51:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80000, 0xfd) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @dev}, &(0x7f0000000080)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp1\x00', 0x121002, 0x0) r7 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0x323) r8 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x8fff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x0) write(r10, &(0x7f0000000340), 0x41395527) ioctl$BLKDISCARD(r10, 0x1277, &(0x7f0000000380)=0x10001) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r9, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r11, 0x641e) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000002500070500000000000000001a0000a6", @ANYRES32=r9, @ANYBLOB="0000ffff0000ffff000000000cb40100677265640000000004000200"], 0x34}}, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00000001c0)={@rand_addr=0x400, @multicast2, r9}, 0x2) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f00000000c0)={0x0, 0x9, 0x7, 0x4, 0x8}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f5420440"], 0x0, 0x0, 0x0}) [ 2013.802588] binder: 22153:22159 unknown command 0 [ 2013.807613] audit: type=1804 audit(1577137873.941:8886): pid=22157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir447032748/syzkaller.bNKEoG/1593/bus" dev="sda1" ino=17314 res=1 [ 2013.810709] binder: 22153:22159 ioctl c0306201 200003c0 returned -22 [ 2013.868743] binder: 22155:22163 ioctl c0306201 20000140 returned -14 21:51:14 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)) memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) set_robust_list(&(0x7f0000000180)={&(0x7f0000000040)={&(0x7f0000000000)}, 0xffffffffffff7904, &(0x7f0000000100)={&(0x7f00000000c0)}}, 0x18) 21:51:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8fff) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0x1003) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e630c4000000000000000000000000006630440000000001163484000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b00"/101], 0x0, 0x0, 0x0}) sendto$llc(0xffffffffffffffff, &(0x7f0000000080)="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", 0xff, 0x810, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x5, 0x5, 0x2, @local}, 0x10) 21:51:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}]}, 0x1c}}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100043bd00000000000000000000000057493848766e21f740a67052b4915164de3163eb703f1fa655a174637cd5fd466679432b101ad5300a36d30e069fba4e50724465e315244a070a2584468230548e53eeee5dd7d4c1b1fd8a2cc675e859fdd5da89a5a097cea2b64855bd", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080088a8ffff"], 0x3c}}, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8fff) r5 = accept4(r3, &(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f00000004c0)=""/239, &(0x7f00000001c0)=0xef) [ 2013.971649] binder: 22167:22172 unknown command 1074021109 [ 2014.000928] binder: 22167:22172 ioctl c0306201 20000080 returned -22 [ 2014.053736] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 21:51:14 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)) r0 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000280)="04", 0x1}]) [ 2014.129387] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x20, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0x309}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 21:51:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000040)={0xa, {0x9, 0x5, 0x5, 0x1f}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e000006630440000000001163484000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d00"/87], 0x0, 0x0, 0x0}) [ 2014.203827] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 21:51:14 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1, 0xfffffffffffffffe}]) [ 2014.338483] binder: 22194:22198 unknown command 100663310 [ 2014.345322] binder: 22194:22198 ioctl c0306201 200003c0 returned -22 21:51:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 21:51:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:14 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='##\x8d-(/\x00', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) [ 2014.638192] binder: 22155:22157 ioctl c0306201 20000140 returned -14 21:51:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x11, 0x2, 0x1a9, &(0x7f0000000400)}) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000080)=""/25) [ 2014.702794] binder: 22208:22211 unknown command 0 [ 2014.716876] binder: 22208:22211 ioctl c0306201 20000200 returned -22 [ 2014.749879] binder: 22167:22216 unknown command 1074021109 [ 2014.766690] binder: 22167:22216 ioctl c0306201 20000080 returned -22 21:51:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:15 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x2194c20892a41c4e, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000002c0)=0xf, 0x4) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x7fffffff}, {0x2, 0x20}], r0}, 0x18, 0x1) io_setup(0x3, &(0x7f0000000080)=0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000040)={0x6, 0x2}) r4 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r2, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000280)="04", 0x1}]) r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8fff) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000000380)={0x80000000, 0x2, 0x9}) 21:51:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00') connect$inet(r3, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) r6 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0x323) r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8fff) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x2, 0xffffffffffffff22}, &(0x7f0000000280)=0x18) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f00000002c0)={r8, 0x5}, 0x8) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r9 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000180)={r11, 0x2}, 0x8) 21:51:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={0x0, 0xfff}, &(0x7f00000001c0)=0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1b1080, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000100)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0x323) r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8fff) r8 = getpid() sched_setattr(r8, 0x0, 0x0) r9 = openat$vcs(0xffffffffffffff9c, 0x0, 0x8002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x8a407e2f5dd9f292, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffe9a) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r10}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r8, r9, 0x0, 0xfffffffffffffca3, &(0x7f0000000100)='TIPCv2\x00', r10}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, r7, 0x0, 0x1, &(0x7f00000002c0)='\x00', r10}, 0x30) sendmsg$nl_generic(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x2b0, 0x34, 0x0, 0x70bd28, 0x25dfdbff, {0x2}, [@generic="d13c889cff9c91deb3d2db0bc0df0cf369d1e0bbd2e27944c06af000e56ef402f0f52e3353d18efc893628bf550c371546c58fd48181cb6ad1", @nested={0x10, 0x7f, [@typed={0x4, 0x87}, @typed={0x8, 0x8, @uid=r5}]}, @generic="22a69a82e2fcf3577e153a59d58f7ac9bc498c1a437a226032d93b9cd146a0f23bc3f35bf0458db4c1919abec43cbf057639a29c3f1ec2b1d1a702edcc0e9fd02a0c83067ac0cb90c6382d0cf2c9ff31d4b312c14c8bc375571fe3e048", @generic="f3b68df4bc4b4524e1f5a8629512ff749585", @typed={0x8, 0x43, @pid=r11}, @nested={0x124, 0x2c, [@generic="95d9425ca5cb31d61f10794399311bd4612eccf2477ffb71cdff980814e109fc6e25744cba632947b9780b190b00b881a8caa3ed4f7eff039ff367dbc1e6f564ac988b5651be7a8c546cc5a23853f8bbce7584cc082eedcff4712dec7cb819d8f72f816a2449745ac1b85585b474706a2923896d4b0dc684ca4ea80bfb54a0ec1896ed18e897dba23144306f0e12459872b651391d0db2a2c2dae2e03ad3d0608e3e1c29fe168ea04f6f823ac16601e34af08f0075386241ced6d195412951e185f1c6e3ee17793c27cd05b830c618f122a356c990e19d3e2946143262ed90671b2a9bfd8c7a54f2af0c55f98e85f5d0b0c36316bf1a0bb8facfed31", @generic="e1b2bf9e110767f3a315597d7739396a5df39b965b2043275ce15c19ef98d4b715"]}, @typed={0x8, 0x3b, @fd=r1}, @generic="5e0f9b4d7aa3baf38ecc841bd99e682170ec7d420d631a35fe3102dcf7618c736fa1e4b8e993f9f10bce188e8803b939515b6f6cb8c153b9016aa8f79bbf4abbe704e1c0294aa55b756072bfd41d14bfaf359133693c648e8bebd64a4e1297a27049d26c97f0ebf9137927211e25d143ff1d8c1d36d6759486a2169211a859d83467c776b680d594764f607f0f8435d3c7cfdf63d35222cf8d71fa5d8bac1a7ebb5da9c2686fe821f925eec588a3afa0"]}, 0x2b0}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r6, 0x0, 0x8}, 0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r6, 0x800, 0x800}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000400)={r6, 0x0, 0x77, "0286cee2ab1d946ee10ad2b66ff62f386551daefb908f073b76b53ea4e4e31e98f00bfe7d875ac88ce6e60824ce0aaf5e6684e7a67af98291a4547fe69e822726d357c13c1f5cd606ee9e045c40c4b6366c7fcbfce2351c6f0c516cd87b91915be1cb798fbdcbfe9f2385cde66cffc06ad24466bf17eed"}, 0x7f) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000140)={r6, 0x7}, &(0x7f0000000180)=0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="8b5b4d36dc717f28af92b151d200004e586af74e80f2100ff5184fb39f8b410bf2ef1a0f9e660acce0c60dcddd80c19f26047e7f15af1777ae912243b46c62d7f27dd6ce6a975fe2815a15b7c6853226f83556ad1056d21bb26c81060ad2b6357519215672", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r10, 0x0, 0x8}, 0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r10, 0x800, 0x800}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000300)={r10, 0x0, 0x3f, "0286cee2ab1d946ee10ad2b66ff62f386551daefb908f073b76b53ea4e4e31e98f00bfe7d875ac88ce6e60824ce0aaf5e6684e7a67af98291a4547fe69e822"}, 0x47) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={r7, 0x2, 0xffff, 0x1ff, 0x6, 0xfff, 0x9, 0x8, {r10, @in={{0x2, 0x4e23, @local}}, 0x1, 0x2, 0x7ff, 0x1, 0x3f}}, &(0x7f00000001c0)=0xb0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r11 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r11, 0x0, 0x8fff) r12 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r12, &(0x7f0000000000)=ANY=[], 0x323) r13 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r12, r13, 0x0, 0x8fff) ioctl$TCSETSW(r12, 0x5403, &(0x7f00000000c0)={0x7, 0x1, 0xff, 0x2359, 0x14, "22435f88158bfb4825fff90ac29ba4f019de26"}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x4, 0x3, 0x10001, 0x7, 0xf1b, 0xb1, 0x400}, 0x1c) 21:51:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2e630c40000600000000000000000000ae98532c888607f9ea4dd0db82ef363c4f000200007d42685a00000000000e90e573000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="061bbd5a"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0x9b0000, 0xe518, 0xf4, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9909e2, 0x4, [], @value64=0xef56}}) syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0)='NET_DM\x00') setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000180)=0x19, 0x4) [ 2014.980052] binder: 22230:22233 unknown command -1 [ 2014.985296] binder: 22230:22233 ioctl c0306201 20000040 returned -22 21:51:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000080)=0xfffffe16) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:15 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000040)) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x2000, 0x0) setrlimit(0x1, &(0x7f0000000140)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000240)) r3 = semget$private(0x0, 0x2, 0x48) semctl$SEM_STAT(r3, 0x0, 0x12, 0x0) semctl$SEM_STAT(r3, 0x1, 0x12, &(0x7f0000000180)=""/182) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000100)=0x6) io_setup(0x3, &(0x7f0000000080)=0x0) r5 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r4, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000280)="04", 0x1}]) 21:51:15 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) write$P9_RREADDIR(r2, &(0x7f0000000000)={0x68, 0x29, 0x2, {0x8000, [{{0x10, 0x4, 0x6}, 0x7, 0x8b, 0x7, './file0'}, {{0x1, 0x2, 0x2}, 0x0, 0x4, 0x7, './file0'}, {{0x4, 0x4, 0x7}, 0x9, 0x3, 0x7, './file0'}]}}, 0x68) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8fff) recvfrom$llc(r3, &(0x7f0000000180)=""/251, 0xfb, 0x12040, &(0x7f00000000c0)={0x1a, 0x30a, 0x2, 0x1, 0x4, 0x9d}, 0x10) r5 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) fsetxattr(r1, &(0x7f00000002c0)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000380)='*}GPL\x00', 0x6, 0x2) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000280)="04", 0x1}]) 21:51:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xa, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRESDEC=0x0]], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000140)=""/191) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000080)=ANY=[@ANYBLOB="15000000849ffe45d88ff6b946a8ec320024e1a619776f0500"]) [ 2015.139061] QAT: Invalid ioctl [ 2015.155292] binder: 22244:22247 unknown command 1074553646 [ 2015.166111] binder: 22244:22247 ioctl c0306201 200003c0 returned -22 21:51:15 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) [ 2015.215148] binder: 22244:22252 unknown command 1522342662 [ 2015.237789] binder: 22244:22252 ioctl c0306201 20000080 returned -22 [ 2015.296836] binder: 22256:22258 unknown command 12582915 [ 2015.302981] binder: 22256:22258 ioctl c0306201 20000040 returned -22 21:51:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:15 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000000)) r2 = memfd_create(&(0x7f00000000c0)='\x00\xf8\x1d\xab\xe8\x9e{\x17\x01\xbe', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000280)="04", 0x1}]) 21:51:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r1, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r2, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r3, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r4, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r5, 0x0) r6 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0x323) r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8fff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000380)={0x100000000, 0x20, 0x1, r8}) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = open(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x40, 0x0) r11 = semget$private(0x0, 0x4, 0xd9) semctl$IPC_STAT(r11, 0x0, 0x2, &(0x7f0000000dc0)=""/107) utimensat(r10, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x180) setresgid(0x0, r9, 0x0) getgroups(0x8, &(0x7f0000000040)=[r3, 0xffffffffffffffff, r4, r5, r9, 0xee00, 0xee00, 0xee00]) setresgid(r1, r2, r12) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r13 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="056304b5a25d40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r14, 0x407, 0x0) write(r14, &(0x7f0000000340), 0x41395527) write$binfmt_elf32(r14, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0xff, 0x1, 0x2, 0x9c, 0x0, 0x6, 0x14, 0x4, 0x38, 0xb3, 0x4, 0x40, 0x20, 0x1, 0x274f, 0x1ff, 0x9}, [{0x60000000, 0x5, 0xd011, 0xff, 0x0, 0x7f, 0x40}], "9bdd6f15b7cd5c1030575908159cce30111605ccf5793e5c2e9edf3589cfaba09100a353112e52c3f1c92140de45f7ad", [[], [], [], [], [], [], [], [], []]}, 0x988) [ 2015.797322] binder: 22271:22272 unknown command -1258003707 [ 2015.811614] binder: 22271:22272 ioctl c0306201 20000200 returned -22 21:51:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x4, 0x20000000, 0x4000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 21:51:16 executing program 3: setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1, 0x98e}]) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) r4 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$BLKALIGNOFF(r4, 0x127a, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) setsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f0000000040)=0x3, 0x4) 21:51:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x78a) r3 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x15, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'rose0\x00'}, 0x18) 21:51:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={'bond0\x00', {0x2, 0x0, @multicast2}}) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6, 0x403) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = accept4$netrom(r3, &(0x7f0000000280)={{0x3, @default}, [@default, @bcast, @bcast, @bcast, @rose, @netrom, @default, @rose]}, &(0x7f0000000300)=0x48, 0x1ba98f13be8b1d51) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000380)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f00000003c0)=0x6) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8fff) r7 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x99edadc8bbbc44bf, 0x100) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000180)={0x79e3d706, 0x7, 0x6, 0x7}, 0x10) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r8 = gettid() tkill(r8, 0x3c) r9 = getpgrp(r8) wait4(r9, &(0x7f0000000200), 0x2, 0x0) r10 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x634, 0x401) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="edffffff100043bd00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000700000062726964676500000c0002000800060009000000"], 0x3c}}, 0x0) 21:51:16 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000000)=0x1) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000002c0)=0xc) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x4c3a, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000100)="e37e4c74bb4b659235d2a59c41dc741b938dd90611a3c735a1242f2a4fb84d39f114eca40a3ec7fa2c7e56eb0a6bbee601e15d", 0x33, 0x7f}, {&(0x7f0000000180), 0x0, 0xa6}, {&(0x7f0000000400)="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", 0x1000, 0x541}], 0x212020, &(0x7f0000001400)=ANY=[@ANYBLOB="646973636172642c71756f74612c71756f74612c6c6f63616c666c6f636b732c6c6f636b7461626c653d6c6f2c71756f74612c71756f74613d6f6e2c6f626a5f747970653d2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac2c736d61636b66737472616e736d7574653d2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac2c61756469742c666f776e65723e", @ANYRESDEC=r3, @ANYBLOB=',fowner>', @ANYRESDEC=r4, @ANYBLOB="2c636f6e746578743d757365725fff07000061636b66736465663d6367726f7570286c6f7b2c7375626a5f757365723d2d766d6e65743173656375726974795c2c746505000000657569643e", @ANYRESDEC=r6, @ANYBLOB=',\x00']) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1, 0x0, 0x0, 0x0, r7}]) 21:51:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000180)={{0x0, 0x8}, 0x6d}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000e5516b5fa484584d8d0c8f209892d823bdbf10ade9d53aefe4a516602aefb510e269"], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x5c, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_handle={0x77682a85, 0x200, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/45, 0x2d, 0x0, 0x26}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}}], 0xffffffe9, 0x0, 0x0}) 21:51:16 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffc}, 0x0, 0xffffffffffffff3c) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) 21:51:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0563044042b812a14ffdf3c4492c35b7806265b79a15fe52305d9128feb020150d274e33984cfbd044bbe53d2a0a458a7a152136107d4439aafc7f758acea82bceca762ce2af90f8b8f22d1f5d68c9de46aeba10259f4928dc6ae0a6c64d8d94343975124f9acd7be06ced084f986ab72fe939ffe94fd13185eae74355400a401c4bdda7b3706d63cd99cb340a1aade2809df34774861346fdfc5d8c5f00747ec251fb7b"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000040)=[@increfs_done, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) [ 2016.148110] binder: 22301:22302 unknown command 0 [ 2016.153849] binder: 22301:22302 ioctl c0306201 20000200 returned -22 [ 2016.174864] binder: 22301:22302 ioctl c0306201 200003c0 returned -14 21:51:16 executing program 2: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 21:51:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8fff) write$9p(r2, &(0x7f0000000140)="0ae1ccbcd83fb2e3aaaf8efe330916ffd2833be21afedcd87c42a142294d17103dcf5b8855b0857d6f9bbd300a0de66b51f8c0f913afbf150c279b32be94620c19116ba098ce0bd45843dc9f785233dee53380b3dae737132c7e67961147c66957f6c812bc67988c1c0249f5df9cf3b36d5276dac5e186dd699b37a8fa9725e66272b22173c81329cb0d3970260ac614278924d83068f17c51659a3cee68ccc74ce5bea8e2fb016eccd33ad45b79a0619dfe21b4df6a936bc92fdede68b3778e6d1f22dec63737", 0xc7) 21:51:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [{0x20, '/dev/binder#\x00'}], 0xa, "70719e31ee73b031cd8f511eb681f5db51d09b81d70a3165f2375f87cc4fcdc80b88bed1dc722e0930c9a112db59004efda8784a4f00378bf6dd44918bc0e2fbd8fda39d4697050a60cd24f2dfb3aeabbbab8eefeed4f52b69788c362d6ee11ded4e679e910e195f6b85e1202b2df02c794a0d62ce40b2be8dd784052870bab031edc8ba0a10e87ad7514e58315646f3dac0ee904049cf540864ea3a8cf682a5eb2dfb895f27a6c055c7d85718f795d80593c770bb5a4f69483ba9671fc5157d84ca91fa4a755276e3baae034f4b7d827a73f23f517ee0c2076147cf0c807e4471654b142f6d753c473a8912ee149e"}, 0x108) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:16 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)) memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x6e0c0, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/context\x00', 0x2, 0x0) io_setup(0x9, &(0x7f0000000400)=0x0) io_getevents(r1, 0x2, 0x2, &(0x7f00000015c0)=[{}, {}], &(0x7f00000000c0)={0x0, 0x989680}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xffff, r0, &(0x7f0000000100)="9d7b5e158b00", 0x6, 0x0, 0x0, 0x2, r0}]) [ 2016.661415] kauditd_printk_skb: 15 callbacks suppressed [ 2016.661424] audit: type=1804 audit(1577137876.801:8902): pid=22326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2868/bus" dev="sda1" ino=17569 res=1 21:51:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) r2 = dup(r1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="066304400300000011634840000000000000000000000000000000000000000000000000000000020000000000000000000000f12a00"/84], 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000040)=0xfffffff7) 21:51:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000180), &(0x7f0000000100)=0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r4 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) setsockopt$rose(r4, 0x104, 0x5, &(0x7f00000000c0)=0x6, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:17 executing program 3: setrlimit(0xa, &(0x7f0000000140)={0x2000}) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r4 = socket$inet(0x2, 0x80000, 0x7) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000000)=0x8000, 0x4) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) [ 2016.845575] audit: type=1804 audit(1577137876.981:8903): pid=22332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2868/bus" dev="sda1" ino=17569 res=1 21:51:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f00000000c0)={0x3, @null, r3}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipv4_getroute={0x1c, 0x1a, 0x20, 0x70bd2c, 0x25dfdbf7, {0x2, 0x4645f766dcba0283, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x600}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x0) [ 2016.943221] audit: type=1804 audit(1577137877.081:8904): pid=22346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir591060983/syzkaller.OuNs5A/2346/bus" dev="sda1" ino=17569 res=1 21:51:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x3d0) setuid(r5) quotactl(0x80, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000200)="bc64a75e4802100c331d6fdbba2cad9b46126b86ea0402c5eb2b080f286efe56e8828bf866b89726ba57cb5a7b5e804a83bce88d17f773021e99e8a0d4a768f8cd755f779c89de1985fee90401a53166832c91ae7f7fcf69b6b12a190bf4dc495b6fba400f53dba34ffa9bb428c88f5fa4db844ce1f2d87b0b0904553e4fc4674b648a8220fb2f5f51a05355068be0f40b2f6f985224e3b58ecc6aaf6ba817dc20b4f96e6cd1984aaec035153fac7eb37672c17c2319fc08b78cbabf7c9036831a54c426a48863a947ccce62e41b73c7dae8f2f207182dbe44b9a9") setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@mpls_delroute={0x58, 0x19, 0x201, 0x70bd28, 0x25dfdbfd, {0x1c, 0x80, 0x80, 0xa3, 0x187, 0x3, 0xc8, 0x1, 0x300}, [@RTA_DST={0x8, 0x1, {0x0, 0x0, 0x1}}, @RTA_OIF={0x8}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x42}, @RTA_VIA={0x14, 0x12, {0x10, "93fd016cb5c0d099b2fe2b3819e1"}}, @RTA_TTL_PROPAGATE={0x8}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x81}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000002500070500000000000000001a0000a6", @ANYRES32=r4, @ANYBLOB="0000ffff0000ffff000000000cb40100677265640000000004000200"], 0x34}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @loopback}, &(0x7f00000002c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_getroute={0x0, 0x1a, 0x20, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x94, 0x6, 0xfe, 0x4, 0xff, 0x146e8d61b85274cc, 0x1100}, [@RTA_IIF={0x0, 0x1, r5}]}, 0x11b}}, 0x0) [ 2017.168936] audit: type=1804 audit(1577137877.301:8905): pid=22346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir591060983/syzkaller.OuNs5A/2346/bus" dev="sda1" ino=17569 res=1 21:51:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8fff) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x9, 0x96, 0x3, 0x6}, {0x0, 0x1c, 0x6, 0xdd}, {0x5, 0x9, 0x7f, 0x4}, {0x9, 0x3, 0x4, 0x1}, {0xc1, 0x1, 0x3, 0xf9}, {0x3ff, 0x0, 0x1, 0x8}, {0x8, 0x1, 0xe0, 0x9}, {0x59, 0x2, 0x6e, 0x3}, {0x7ff, 0x81, 0x7f, 0xeabe}, {0x3, 0x8, 0x1f, 0x1000}]}, 0x10) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) fstat(r6, &(0x7f0000000280)) [ 2017.274406] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 21:51:17 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x9) rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0xffffffffffffff09) setrlimit(0x1, &(0x7f0000000140)={0xfffffffffffffffe}) io_setup(0x3, &(0x7f0000000080)=0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x8, 0x1, 0x4, 0x20, 0x2, {0x77359400}, {0x3, 0x2, 0x5, 0x5, 0x0, 0x40, "2aecb212"}, 0xffff8298, 0xfb91f473e14b9c94, @fd, 0x7ff, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'ip6tnl0\x00', 0x2}) r3 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r1, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000280)="04", 0x1}]) [ 2017.333661] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2017.352387] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 21:51:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f00000000c0)=0x10000, 0x4) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000140)={0x0, 0x20, 0x0, 0xa7b, 0x800, 0xaa, 0xfbe, 0x1f, 0x7, 0x3, 0x9, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) [ 2017.403458] audit: type=1804 audit(1577137877.541:8906): pid=22373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir593238974/syzkaller.IePVN6/1807/bus" dev="sda1" ino=17569 res=1 21:51:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8fff) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f00000001c0)={0xec0, 0x7, &(0x7f00000000c0)=[0x3ff, 0x100, 0x200, 0x8, 0x6, 0x4, 0x100], &(0x7f0000000100)=[0x7, 0x9a, 0x200, 0x3387, 0x1000, 0xdff, 0x7f, 0x1f, 0x5], &(0x7f0000000140)=[0xff01, 0x6, 0xfff, 0x0, 0x1ff], &(0x7f0000000180)=[0x1, 0xf801, 0x50, 0x3f]}) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) fchdir(r4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e630c4000000000000000f200000000"], 0x0, 0x0, 0x0}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000040)={0xfff, 0x7, 0xeb, 0x1, 0x6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0}) 21:51:17 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000100)={0x5}) io_setup(0x3, &(0x7f0000000080)=0x0) r2 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r1, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000280)="04", 0x1}]) [ 2017.548124] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pig=22381 comm=syz-executor.2 21:51:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="16fa09"], 0x0, 0x0, 0x0}) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) r2 = shmget(0x0, 0x2000, 0x8, &(0x7f0000d15000/0x2000)=nil) r3 = shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x2000) shmdt(r3) shmdt(r3) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r5 = semget$private(0x0, 0x2, 0x48) semctl$SEM_STAT(r5, 0x0, 0x12, 0x0) semctl$SEM_STAT(r5, 0x1, 0x12, &(0x7f00000002c0)=""/205) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) r8 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r9, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x1, 0x14c33701ab1f0b19) r11 = fcntl$dupfd(r0, 0x605, r10) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r11, 0x5386, &(0x7f00000000c0)) shmdt(r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2017.596523] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pig=22384 comm=syz-executor.2 [ 2017.609404] audit: type=1804 audit(1577137877.731:8907): pid=22379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir593238974/syzkaller.IePVN6/1807/bus" dev="sda1" ino=17569 res=1 [ 2017.680772] binder: 22385:22389 ioctl 8904 20000040 returned -22 [ 2017.710601] binder: 22385:22389 unknown command 653846 [ 2017.715946] binder: 22385:22389 ioctl c0306201 20000200 returned -22 [ 2017.722603] audit: type=1804 audit(1577137877.831:8908): pid=22387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir423096274/syzkaller.0IKwTW/920/bus" dev="sda1" ino=17746 res=1 21:51:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'erspan0\x00', {}, 0x8001}) 21:51:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="00a71900"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0xf000000, 0x8001, 0x3bb87bee, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x990a6b, 0x0, [], @value64=0x101}}) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000100)=0x638) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x7ff) 21:51:18 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x40, 0x2710e572, 0x9, 0x6f, 0x53, 0x5}) 21:51:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fsetxattr(r0, &(0x7f00000000c0)=@random={'os2.', '\x00'}, &(0x7f0000000140)='mime_type\x00', 0xa, 0x2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) [ 2017.955526] binder: 22406:22411 unknown command 1681152 [ 2017.986219] binder: 22406:22411 ioctl c0306201 20000200 returned -22 21:51:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000040)={0x2, 'veth1\x00', {}, 0x1}) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) getgid() 21:51:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_open_procfs(r2, &(0x7f0000000040)='mounts\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000080)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffdd6, 0x0, 0x0}) 21:51:18 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xdb235a5b02192e6c, 0x0) r3 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @remote}, @in=@local, 0x4e20, 0x3b7e, 0x4e24, 0x0, 0xa, 0x20, 0x80, 0x29, 0x0, r3}, {0x24, 0x4, 0x0, 0x80, 0xff, 0x9, 0x0, 0xfffffffffffffffa}, {0x7, 0x6, 0x80, 0x7}, 0x7a8, 0x0, 0x0, 0x0, 0x2, 0x1}, {{@in=@multicast2, 0x4d4, 0xff}, 0xa, @in6=@rand_addr="8464e42ab73a2c5afe53b1c776b45107", 0x3506, 0x3, 0x1, 0xff, 0x5, 0x1, 0x8001}}, 0xe8) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) 21:51:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/s\xcd\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x2000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x70bd27, 0x25dfdbfc, {0x80, 0x14, 0xa0, 0x4, 0xfe, 0x3, 0x34, 0x4, 0x1000}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x4c104) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES64=r0], 0x3}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000300)) [ 2018.233541] binder: 22427:22432 ioctl c0306201 20000100 returned -14 [ 2018.439157] audit: type=1804 audit(1577137878.571:8909): pid=22399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir423096274/syzkaller.0IKwTW/920/bus" dev="sda1" ino=17746 res=1 21:51:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x310f199511392e6e, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000140)) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x410000, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r3, 0x4147, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="06630440030000001163484000000000000000000000000000000000000000000000000000000000000000fcd100"/82], 0x0, 0x0, 0x0}) 21:51:18 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000180)=""/209, 0xd1}, 0x40) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={'nat\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f00000002c0)=[{}], 0x0, [{}, {}]}, 0x98) r3 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000280)="04", 0x1}]) 21:51:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0xfc, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xdc, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xcc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_REMOTE={0x14, 0x3, @remote}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @local}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x9}], @tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @local}, @IFLA_IPTUN_ENCAP_LIMIT={0x8, 0x6, 0xff}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @tunl_policy=[@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x8, 0xf, 0xf0407585213d27e7}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}], @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x36}, @IFLA_IPTUN_ENCAP_LIMIT={0x8, 0x6, 0x1}], @IFLA_IPTUN_PROTO={0x8}, @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@IFLA_IPTUN_ENCAP_LIMIT={0x8, 0x6, 0x4}]]}}}]}, 0xfc}}, 0x4080) r1 = open(&(0x7f00000003c0)='./bus\x00', 0xec45676b08dbf3f3, 0x20) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0xf8, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x90000}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x84}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x63}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6c}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xa2a}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x6048) sendfile(r1, r2, 0x0, 0x8fff) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000380)) r5 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) sendfile(r4, r5, 0x0, 0x8fff) ioctl$TIOCNXCL(r4, 0x540d) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0xc0506617, &(0x7f0000000140)={{0x1, 0x0, @reserved="9cd3cb35721a12aade8ccf9e1193846a45251ab323dc6e1aa6deda06be52e9fd"}, 0x16, [], "1ed5b6e9f4b702dc621f688e7afd626c2fc5b735e930"}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x2) fcntl$setpipe(r9, 0x407, 0x0) ioctl$PPPIOCDISCONN(r6, 0x7439) write(r9, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r9, 0xc0245720, &(0x7f0000000300)) write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f00000000c0)={0x2, 0x7f}, 0x2) 21:51:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x400, 0x0) 21:51:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$kcm(0x29, 0x4, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x103800, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000080)=0x3) 21:51:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1ee5abab20785f992f61b0f5d11da7e4d154c440fb87fcb083d17b7d252a92ed6163713469df280bfed92de534ee3f66f2133f0fa64a2b3dcb8169d01a4e0378489ee3e1ceb1cef10bd2ea09ca302cfec273833ce4c9b673d39af2789d78b534b6aa2d23accec81bc1e2d5c606acaae016cf07fb1339dcf2ea4f35c094eea256e7e7ae566ee62f5b1b1cd13862d753552d903e329328b619f91d5cdbbf13f282e7d84bca07cada86a03b19000ba41ac5b745ea4d0b4366db0eb1f84ee9b1b702f852c072cf8dcb80b80f39eea537d299acc71842ff2185a5a5a46e9abbdba6d46944a9e3"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) write$P9_RUNLINKAT(r2, &(0x7f0000000400)={0x10a, 0x4d, 0x1}, 0x7) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000480)) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$bt_rfcomm(0x1f, 0x2, 0x3) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x141200, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000440)=0x28054) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000140)={0x3, 0xb, 0x4, 0x400000, 0x3bc2da4a, {}, {0x2, 0x1, 0x6, 0x6, 0x30, 0x9, "e4a4d76a"}, 0x2, 0x2, @planes=&(0x7f0000000100)={0x1, 0x0, @fd=r5, 0x3}, 0x3e8e}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8fff) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) r7 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r8 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r9 = openat$cgroup_type(r2, &(0x7f0000000440)='cgroup.type\x00', 0x2, 0x0) r10 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r10, &(0x7f0000000000)=ANY=[], 0x323) r11 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x8fff) r12 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r13 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r13, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r14 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r15) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r19, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000006c0)={0x0, 0x0}) stat(&(0x7f0000000700)='\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000007c0), &(0x7f0000000800)=0x0, &(0x7f0000000840)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000880)={0x0}, &(0x7f00000008c0)=0xc) r24 = getuid() r25 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r25, &(0x7f0000000000)=ANY=[], 0x323) r26 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r25, r26, 0x0, 0x8fff) r27 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r27, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) r28 = syz_open_dev$usbmon(&(0x7f0000000bc0)='/dev/usbmon#\x00', 0x9, 0x100) r29 = timerfd_create(0x37b02a5c51c12923, 0x80800) r30 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c00)='cpuset\x00') r31 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r31, 0xae01, 0x0) r32 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r32, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) r33 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r33, &(0x7f0000000000)=ANY=[], 0x323) r34 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r33, r34, 0x0, 0x8fff) r35 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r35, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) r36 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r36, &(0x7f0000000000)=ANY=[], 0x323) r37 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r36, r37, 0x0, 0x8fff) r38 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r38, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) r39 = syz_open_dev$audion(&(0x7f0000000c40)='/dev/audio#\x00', 0x7ff, 0x8000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000c80)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r42, 0x0) r43 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r43, 0xae01, 0x0) r44 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000d80)={0x80, 0x8, 0x4, 0x70004, 0x1, {0x0, 0x7530}, {0xecd297871a9352eb, 0xe2af3ebf3025cd62, 0x20, 0x1, 0x80, 0x81, "fa56cec9"}, 0x1, 0x4, @fd, 0x473, 0x0, 0xffffffffffffffff}) r46 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r46, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r47 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r47, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r48 = socket$isdn_base(0x22, 0x3, 0x0) r49 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/uinput\x00', 0x2, 0x0) r50 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000e40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000f40)=0xe8) r52 = getgid() r53 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r53, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) r54 = socket$inet_dccp(0x2, 0x6, 0x0) r55 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r55, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r56 = gettid() tkill(r56, 0x3c) r57 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r57, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r58) r59 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r59, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) getsockopt$sock_cred(r59, 0x1, 0x11, &(0x7f00000036c0)={0x0, 0x0, 0x0}, &(0x7f0000003700)=0xc) r61 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r61, &(0x7f0000000000)=ANY=[], 0x323) r62 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r61, r62, 0x0, 0x8fff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003740)=0x0) r64 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r64, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r65) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r66, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r67 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003780)='/dev/rfkill\x00', 0x80000, 0x0) r68 = gettid() r69 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r69, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) fstat(r69, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r71 = getgid() r72 = fanotify_init(0x19, 0x802) r73 = accept4$rose(0xffffffffffffffff, &(0x7f0000004e40)=@full={0xb, @dev, @remote, 0x0, [@rose, @remote, @null, @rose, @default, @default]}, &(0x7f0000004e80)=0x40, 0x100000) r74 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r74, &(0x7f0000000000)=ANY=[], 0x323) r75 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r74, r75, 0x0, 0x8fff) r76 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r76, &(0x7f0000000000)=ANY=[], 0x323) r77 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r76, r77, 0x0, 0x8fff) r78 = getpid() sched_setattr(r78, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r79, 0x0) r80 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r81 = getpid() sched_setattr(r81, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r82 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r82, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r83) sendmmsg$unix(r1, &(0x7f0000005140)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000000c0)="f131d2c97d1b8f1087c4d747ccc7a682aba2cd5283390968967a4e227e9fe8489fc1278466c49723fcb89e1fa8ffd76ccb1ac875499b84147884c0c6785ccd5d5ccd4d12852bba2a27f6c56e", 0x4c}, {&(0x7f0000000200)="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", 0xff}, {&(0x7f0000000180)="852f60d254a17479087b05844de29f5959d5c515", 0x14}, {&(0x7f0000000300)="7dce5820a8d7cdc22a51d07196f0d20d5681476aa95b6aa7df2d51f832c6dad8abfd4f8b78ac7114819b59f39a171a8ee9160103cbaf5be6e6ca5655a4357e56c00e9f82e9bd8bfb8aa0f3167fbbba2e84122c35707c53a69c22252e0c72517e436ffaeb29babfe5e3dfdc6e8375e06e6ef13950f1a87d6c72450a30e3c5ab45149d0e5dcd9d5a7f6a0f9a6c3dceee6d13e3b8cae6615f6272699aaa3a0d1f046abd23c8c0f3babd59e59f26ac16315fb91d36a528e4f3867e4843f3b98cd95f499e32d70d45d0d59dc0ef50df57570a45b145c3f3f6004f2bb903c8d570", 0xde}], 0x4, &(0x7f0000000900)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, r4, r0, r1, r5, r2, r6, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r7, r8, r2, r9, r1, r0, r11, r0, r12, r13]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @cred={{0x1c, 0x1, 0x2, {r23, r24, 0xee00}}}], 0xf0, 0x1}, {&(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000a80)="2f7736c9e361c89d9b834d36ca1d72dfb769882d89478c7f3bec2256f0071da5c2f8f229f91c933bbd6384b9690d872134d1e27cf41fa61722c5eb24b9d86c510a4523de8bde11e0a7a926d49049eee28c7bba8c9d967293052f7a28bc85777dd783a7cbd93349ab9aeda2fab2b720b47a8184a33cd8206482016fbd3ea34fc23319301fe29cc1db7c17cd9b442a38daa1e1fcbb1f1e59cc06a25706872c808246528f5ac683ad8352fa451ac9ab0920b1cc18d969cf55b0ffae5480134352e56f02866f807f072349db44cbc630b7acc4f4a77b1b89f0433e1a48cfd315daa32bdce3839e2ba759cdc8f3", 0xeb}], 0x1, &(0x7f0000000f80)=[@rights={{0x1c, 0x1, 0x1, [r26, r27, r28]}}, @rights={{0x2c, 0x1, 0x1, [r0, r2, r2, r29, r30, r2, r31]}}, @rights={{0x1c, 0x1, 0x1, [r32, r33, r35]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r36, r38, r39]}}, @cred={{0x1c, 0x1, 0x2, {r40, r41, r42}}}, @rights={{0x24, 0x1, 0x1, [r43, r44, r45, r46, r2]}}, @rights={{0x1c, 0x1, 0x1, [r47, r48, r49]}}, @cred={{0x1c, 0x1, 0x2, {r50, r51, r52}}}, @rights={{0x24, 0x1, 0x1, [r53, r54, r2, r0, r55]}}], 0x148, 0x20000111}, {&(0x7f0000001100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002440)=[{&(0x7f0000001180)="bc053fabc584fbfbdd916c0181c09816600df26b1482bf3142e22603898b6089b3302ad3f96ccc845907b3343b49dc075865a98c12307ce9052e7878d25ca69c30d50fe11768c5cd8d6063c36f5dfa62fe1d075275379551d5c0ec530ba5142c049e1e906479995cd8b84ad854364be870165146cd157c9ca30de2fc480680e800cef63e39f9a7bee98d45eefac0896b24e383bd12c74e9b8986c7af5004b805", 0xa0}, {&(0x7f0000001240)="e913ac8bcc532253522c76d2eead5091635820a1217d687d02fea05796593f300d319c3d163e632165da2faedef8d36226bdf8a4892440484f2b1ee57d2fe52c0a0b561a4d9f01b6b15ba1b32f7a1159c199705578a791fbd3dfbe03a910b64475d69fd4733f69250ed2f29fb205eb0637907d3571f0b44001623dc8befc4dc9434f52f4", 0x84}, {&(0x7f0000001300)="02b131c05f0fa45c6eb0a3f66e8a036b652dc2e54157a4e8df92c19691c7a3ddcd1eb816c08745674ed9093f35158035650d7716ea231a9e9caa694f7d56851399fc182cf009755e2c5faec2cd32a430628087cbae07bc9fb5deb91e06482fd8c01e5ec1d972b1eff3428cc567f1f6c99d4d82921d074452ecfff8", 0x7b}, {&(0x7f0000001380)="d219212a2f29c54cfa2a7f8a9d6d448d8cff4005fb5a0658159fdbcbd37581de523cb2576a88b7e6f65dceeafd1580dd5e030d787702072c5fcf40436d15f6f560078b3a0307c069651fbcb8b1f06703117d660d78194412f6525a644958ce2bd10fffe8469aecedfaa3029e84c7", 0x6e}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000002400)="98fe6c792e442c4c3eaf06cff8d5d5584ff323a8320f", 0x16}], 0x6, 0x0, 0x0, 0x4000}, {&(0x7f00000024c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003680)=[{&(0x7f0000002540)="d71e2ab116fb38de90d1463281ff2f9fa89dae1d56848029eb6fa3bb1cf86773", 0x20}, {&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000003580)="ae2c952d301922d69ac79aa46d68e95aa9fb05a5e83b575d1ca2979b37fba1d2d0018ee41d526ef56d44f068bc8a3d230135244f18f89c1b02b2cc3259be19759b3dbdae1942503e8166152d3f8f1725ee9ecc83577c9300754a5554bfc2138adeb37aa1fb7c76782f7c788ea6d57aa25d95be2f5e69278db9dd953c74c2f267bae4479021790a54ceb8165db5cc241aa49bc706f0ca3e313309ed77c3fead5aa476d85c8a89df246e8f84040ead40bc455d4dd86fe900ff002c9fb3f942f7a7f35a55973f09fe42e78d50757b4f7ce86d55c31f1128fb124e", 0xd9}], 0x3, &(0x7f0000003840)=[@cred={{0x1c, 0x1, 0x2, {r56, r58, r60}}}, @rights={{0x20, 0x1, 0x1, [r61, r2, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r63, r65}}}, @rights={{0x18, 0x1, 0x1, [r66, r67]}}, @cred={{0x1c, 0x1, 0x2, {r68, r70, r71}}}], 0x98, 0x80c5}, {&(0x7f0000003900)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004cc0)=[{&(0x7f0000003980)="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", 0x1000}, {&(0x7f0000004980)="70867e0bf9935dc6fc2b9ec7a3eeb12277c79d03fbdecd2fde7d3339b440b2e3b0eac920a68d374ee830376f2471b99d2dbc8fa4c020cac94940bf7c94fae17d1030c4e9ca5ef3cca2fe6b06d1090ee7a5d2763c3357c8b66996a6fddc36dd4bfc1f36e88d15393fae143bab7b58ef7116a5674f34f95c897f80139913fdef485c88256ede9f3e56c97ebd04ccb44492da8fdd35f108e343210f92af8ebfef4b9991dc6e550b139a2194232c063c5e638974e1027f8286bff824923cb1e3e23a8fed8c69951efc17bd18e433e858c7b091d4", 0xd2}, {&(0x7f0000004a80)="22a3000ab4a3856a3362ea1aa709aaa21e9f6a0910221171c65345e0202b789fd2344e76d2d9a0be9d38c9ed9e9dfd71dce25aff3e7fe83e8a7861726b75ed20fc1c58ceb30bf33896f68527f9be98795254292f8a", 0x55}, {&(0x7f0000004b00)="3ce8bf98fc6ad251242b074cf94f89a3455e3361aa6c5766348321d3aaa28e59fbbf1b6322ab8e5338c68031dc46383157eb35d7ded9ac76c759c028ffa4687229a0667d9ce78f193ea4e68a1c0b59c2d1f6cc662187d52c95d373bf6a973c32858562b3df58e422a206ae9e0a188ccf3c8456cdfcc2d51a2ee6b8f89a6a55b9d6d2f9d2bff1a8a711e2e97f14f75125bd0e847b426fe88d0d22037e74b50d09ef7a6baef8", 0xa5}, {&(0x7f0000004bc0)="86e86cf3098636650119597db6e79cb9cae28ca07e56932640b08bc426ba219cc6a26bbb549d589e4de80a3709b7b5a0bbaee59a25921b64fdb4edd6cfde58f65e5315badd0900b7709112092fc8c4a3a64ae71681b45b9f36b931d14c925886b2b834e3fc739d3c54edd8cf2df74b543d4412a89b8869063dc57219b0fa73346c100006949d2d4585ce2fa1e22da422b1ffc3acd0a3e926e27a62fc74e2d58a44f7383d5b3958a8240d515046bc8e1d518c8c17c18b2fcb7b6f2489f5c648f6f65e1cb37ee62c361302959377c92342156ea8ac0a10e996de2329284439f62ce2e4504e9e98478c9621ce", 0xeb}], 0x5, 0x0, 0x0, 0x10000080}, {&(0x7f0000004d40)=@abs={0x10e72329318a0819, 0x0, 0x4e22}, 0x6e, &(0x7f0000004e00)=[{&(0x7f0000004dc0)="f938d7f3d46619a22adc", 0xa}], 0x1, &(0x7f0000004ec0)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r72, @ANYRES32=r73, @ANYRES32=r0, @ANYRES32=r74, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000009b14000000000800"/20, @ANYRES32=r76, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r78, @ANYRES32=0xee00, @ANYRES32=r79, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x40000}, {&(0x7f0000004f40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000050c0)=[{&(0x7f0000004fc0)="1f8c2fcecd06be49ea2d1eb009cf7fd9de76a719e81d4d7fa3c3425cbc3293a426f4771de76ed4e962d78a43343007bff2f99473534fe53c82b238e7f6da057b33ce8c4a81b62e0eedba56767f269d407e9058313493f032b9de6dbd943cf0544f2745efa97e30a9b8a7c7d1e03f4ec0f1478148b8f585c82c74db3baec409d90e820310f871e8169b0e63c3ada987753e1000577a897e3ee3379ffcd48fd386c7377d97eec87671b614580b844fe83cced65e78e0549d513dd3f47d3f", 0xbd}, {&(0x7f0000005080)="96495308fd16cfedff35c4c4476dae02073eed195b38324244a1c183529fce358fb6c9ae06", 0x25}], 0x2, &(0x7f0000005100)=[@rights={{0x1c, 0x1, 0x1, [r1, r2, r80]}}, @cred={{0x1c, 0x1, 0x2, {r81, r83, 0xee00}}}], 0x40, 0x4000}], 0x7, 0x4000) r84 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r84, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r85 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r85, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r84, 0x0, 0x15, 0x0, 0x0) 21:51:18 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)=0x1) rt_sigprocmask(0xa7b2b463799b4288, &(0x7f0000000000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r2 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r1, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000280)="04", 0x1}]) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)=0xf900) 21:51:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(r5, &(0x7f0000000180)="6b8821b168639f343ee50ed6a08dc3d1e747df8c6c4ca2e0cace8e8d054ecb101c5724baca218bbebdc3a9f7b7d891d4cd9c504fd176b5f211834fb217d33ac56264ffdf4696069d259622cc451c8fa97958de32652093e7f0473069c390c599254722f83101f2373a7711ad2ec53e79d0eb1101", 0x74, 0x1000c000, 0x0, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r7, 0x0, 0x8}, 0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r7, 0x800, 0x800}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r7, @ANYBLOB="00003f000286cee2ab1d946ee10ad2b66ff62f386551daefb908f073b76b53ea6d4e31e98f00bfe7d875ac88ce6e60824ce0aaf5e6684e7a67af98291a4547fe69e822"], 0x47) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000140)={r7, 0x7fd4, 0xffcf}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xffffffffffffff38, 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = gettid() tkill(r2, 0x3c) r3 = syz_open_procfs(r2, &(0x7f0000000040)='net/xfrm_stat\x00') ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2018.870706] binder: 22467:22468 unknown command -1414798050 [ 2018.895823] binder: 22467:22468 ioctl c0306201 20000200 returned -22 [ 2018.931017] audit: type=1804 audit(1577137879.071:8910): pid=22473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir593238974/syzkaller.IePVN6/1810/bus" dev="sda1" ino=17896 res=1 21:51:19 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f0000000400)='+\x8b\x8a\x16\x11O\xdd\xdfk\xac\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f?-\x1f\x06\x87\xff\x88\x86v\x11i3\xcd\x13\xf95\xd6IB\xa1\x13\x87\xd4D*\xdd\x1d-\x9f8mr\x00]P\xcc\x7f\x12\x94\x15\xf7\x9b\xc8\x10\x9c+;\xf3\xf8\xd0\x10\a\xc9#=;q\xdb\xd2\x1c\xe0A\x8d)\xb54BS\xce\xb5Q\"\x18\xc1\xb0j\x10\x01\x83\'\x84Z{\x95\xb9\x88v\x8d\xd2\x1c\xc6p\xfe\x89{Z`\xf2\xe4\xaef\rg{\xcc\xa4\xbd\n\x1b~5E\x85n\xce\xa6\xc5\xc8W |\xe1', 0x9) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80400, 0x0) read$fb(r2, &(0x7f0000000180)=""/182, 0xb6) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) 21:51:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x490b03551742d41b, 0x0) sendmsg$rds(r2, &(0x7f0000000940)={&(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/130, 0x82}], 0x1, &(0x7f0000000880)=[@rdma_dest={0x18, 0x114, 0x2, {0x9, 0x56}}, @rdma_args={0x48, 0x114, 0x1, {{0x2, 0x7}, {&(0x7f00000002c0)=""/169, 0xa9}, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/224, 0xe0}, {&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000001c0)=""/25, 0x19}, {&(0x7f00000005c0)=""/183, 0xb7}, {&(0x7f0000000680)=""/168, 0xa8}, {&(0x7f0000000740)=""/110, 0x6e}], 0x6, 0x8, 0x1109bf9e}}, @mask_fadd={0x58, 0x114, 0x8, {{0xf87, 0x9}, &(0x7f0000000380)=0x846a, &(0x7f0000000840)=0x7f, 0x7, 0x6, 0x4, 0x1, 0x12}}], 0xb8, 0x80}, 0x40) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x54, 0x0, &(0x7f0000000040), 0xfec3, 0x0, 0x0}) [ 2019.146234] audit: type=1804 audit(1577137879.281:8911): pid=22492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir593238974/syzkaller.IePVN6/1810/bus" dev="sda1" ino=17896 res=1 21:51:19 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x323) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8fff) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000540)) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000180)=""/145) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r4 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r3, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000280)="04", 0x1}]) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x80000, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f0000000500)={0x7, 0x9, @value=0x6}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r6, 0x800442d4, &(0x7f00000004c0)=0x6bc) r8 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0x323) r9 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x8fff) ioctl$TCSETAW(r8, 0x5407, &(0x7f00000002c0)={0x8, 0x4, 0x4, 0x6, 0x13, "598c2204c611fe35"}) quotactl(0x13f, &(0x7f0000000040)='./bus\x00', 0xee01, &(0x7f0000000400)="832aa1d75754c233b03af57e7b57dfdd9bd95e428625ff580d0a0b70ab7159135232c3af63b1a037d82ef72103811f077798cf3be65f3451b26646776f7fd2ce4a09891713e78422244d72a029962ba5303adb071162c3cb06c47829c54cbc8237bb11029c915473c665747808e92367aa4e9aef2193ed0cd9920e0abf77908ac138f37f533ea5fd5c1d5f6bf37037d05206145e735e37b8b61e5ae81ee0137db940c41fb5") fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000600)="2c4c6481a318296857b7d1ec660a724ad9ae8e517cb705aa9b61dfd3a066823e15a0db55dba78e2c601a7d3beccda6a9295b878dd4b378e6be3b081f2f91792451e2fd0044e0ba8491e4bef8bc333c43026b8795cebfcfbd2e3265e13a4de48681f0e507e72f144a28fe0962999b98d2317acb868d4b6265ec946b58252a8feb2c9b09babb2bdbfc38262482f309a8fbb8d40516000000000000000000000000001af347bd9da3e2360f8f2396731287e62510a633da7ba9bb08548703e5e77d5c2fcc0810ac60ed71cc32de30d8a3d36257e651a0b73d0793465765ee2415", 0xdf) creat(&(0x7f00000000c0)='./bus\x00', 0x30) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000000)={0x2, 0xdb}, 0x2) 21:51:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) r5 = open(&(0x7f0000000240)='./bus\x00', 0x2000, 0x4) sendfile(r4, r5, 0x0, 0x8fff) write$FUSE_LSEEK(r4, &(0x7f0000000040)={0x18, 0x2f, 0x7, {0x10000}}, 0x18) socket$inet(0x2, 0xa, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:19 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080), 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 21:51:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000080)) 21:51:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = dup2(r0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x1000, 0x1000, &(0x7f0000000540)="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", &(0x7f0000001540)=""/4096, 0x8, 0x0, 0xd7, 0x66, &(0x7f0000000180)="332355e5ba3c1254a4f61f407c799178c6ae3ab7b74d68a7a406d7103b2cec9267cfde1f02738a98da094f88414635e52eedde347ca9a74fea1ef71197bd222fb0109e7990499172f8d84a61159ab7ccd52d6cc3cb70ab1744a17570c8db64c08907a1437b964bcaa31e3166ff720b80dd1caffa7591e95954868ed3b23e12c47fdbbaacf214a1b5e311e8c159a1d4e6d687fde489d5ff9e735672223fc6d63cfb6c123642efe4fb59c63129ca26c7a043d514179f3e04170e4ea2ff0771ca4e5f548a30ad2bb9e7685a523481886c38a0f8e17ca6f02c", &(0x7f0000000000)="ef52c04c8c92742648f1f1192b57541c22916b5e1b61a13871561a44d28a262b26f59c8f843758939c3dea825c71b62c0d456349592f288d12f10adc0feedc5cc5ace7c960203c2a33d6cf26b416bb1c5f79b648a5c01240a9bb623e73d3de27c0054efd58fd"}, 0x40) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000400)={0x10001, "b19de0f8f1752dccab726fe7cbe8f53b25bf109bb9a1aad86f2b624b80ecaadaf78bd1adb7f0cd496dcf529c26ca9dfa15d872742cb81d2c47d5b40dccd45aeec2f6bbc6bdfa185352225c342894311a3ab7d5b3c7d613286ab1fa4de0bb01fc86e10387c4777d58259980598b609ee96d5fa81690d149d88d2b0b1f1495d7f1884200dbb14243ff376c7bede76cac6e9cfd6330cfbbcfce6204f1eaf8bb3c9cbf0d7decdf57a4c90e0a2291c24989547c8e3203ee72a8f44112f2a611fd5bf2e42277f6d780cb69466d4b2bec064769803fd2842a80bb23307954a5f28940de7dcf9084653cc340064c1489f50d1d8d7f16ccd6a9e4c197ba00a89f8071a021"}) rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r3 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r2, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000280)="04", 0x1}]) 21:51:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) r2 = gettid() tkill(r2, 0x3c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x0, 0x0, 0x0}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x200, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x103000, 0x0) r5 = fcntl$dupfd(r3, 0x605, r4) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r6 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0x323) r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8fff) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x5, 0x77}, &(0x7f0000000140)=0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r9, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x78, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcfe9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffe6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r8, 0xfffffffa}, &(0x7f00000001c0)=0x8) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x7) 21:51:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000016c0)=[{&(0x7f00000002c0)="6936193ccb014fa42a909dd7c089a1226bb92aa116cbf54acd5a123b1362efbad4adcf470d618db779ff267fde7f41c52c778cf788db97e12eb4a8c8a89d85c4fb4fff1f1760dbfc1a4778067fcdb3ded9e786d6aac5ee01d257044ae6187f4ade97316acd23b4aee5ad8e7ad12c4a2dad2103fe9dd588fb3bc1f0626fbcba551df56c64ae2aad62f2c7b27bf6eb7befb202118047df182b", 0x98}, {&(0x7f0000001400)="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", 0xfd}, {&(0x7f0000001780)="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", 0x1379}, {&(0x7f0000001500)="682d134dad603436b798d99f130a60863b982d315deb1c6ca935e896ee03c6a730d628d07cc7eea63b0d6df0d712351620da29efbc4fa1a9d62a2af072eff893ea1bbc328b35fddd463568aa23655035f4f6a1d3deb8dba5c1efbf2b6889eda84143bf57a898d10f0043a872422030f0a8315da7c7ddb010d05b049b8ab1942e76cbc5590f5456c9ada2f07a9a131048679bd66ef763447a08aa491f79bcac014f5b1e8543dd959a7c0de34a3df595b23ff50dfc8cf3729f1ca429237ca03a3940061abf262e86", 0xc7}, {&(0x7f0000001600)="011667a77bf3217bbd193c5cadcbd2425dcbc1b88ec8b75acb79cd7c21b3e2f04d4038f572b2c43e2d63af1ce7d3ce48b780d9f042354990f2fbe242336717b3754d381959c43c14079146f81ecbb9e436e4e0289fd711efb52a77dca4f0d8233280242573665d457c93459f69939f6f8f6f8b7ba8680c9268d88644ac051c10cdd7a3d532532e009c8bb315acc0738f35de3129133c0a4cbe6ac8635ea706e686b4fd3a83fcada6c6ba7056c75ca09b1c5a042ea1ff21a49bd28b", 0xbb}], 0x5, 0x1) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000003c00)={0x1, 0x53, 0x95a8b2cf7f6e6546, 0xa538, 0x6, [{0x3ff, 0xfffffffffffffff8, 0x3, [], 0xc00}, {0x0, 0x100000000, 0x2, [], 0x800}, {0x0, 0x6, 0x3, [], 0x401}, {0x0, 0x5, 0xf64, [], 0x8}, {0xd04, 0x1f, 0x2e8d, [], 0x204}, {0x3be0, 0x1, 0x2, [], 0x1208}]}) r3 = dup(r2) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) socketpair(0x10, 0x2, 0xdb, &(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000003b40)=[{&(0x7f0000000400)="6e21626bb3d853b5dcffa9eca3718ad2f0ce9ab8f2531c83763f1c6a790b49c037d37b0088cc117d10c1081f4431da968432a4c4e8b1c53bb874098f90468ff3b211f2b6be3f4f3416ca6a885e7d17b6a638f7dae7e08dd6a612717237f43131234e612b8ec6782621e7b96be91971f6f7c772958530fd3bc54ffc98033cfb699c0a7b31a1eda3a9fa0c228571a358ba053521385848531ce7f08c7a59eea9addf0cc0055938d0451d271c1b01c1f47b729185069b6857b58f369e5ceb10a6c51994769ceb2a2c164019e9487166bb5edd9ab3eb91d3caad9e050bf1ebd8332b7a6d9ea22d2934b9cf5c31954a201be095761e1a8dd40b3c2ce3ecceeead47c62b5dfbbe3924798a1d3d6895c3b8b90b7ad16447e9f7c82d4959ab2f88094ba12b006a13e3f3238203f44fecd9158ae3d196a800391d1602dc5a3228a45befdbc0565b729f65740e5811a1b2746a650cf4ea48eba2650c7e74a6753bf1ed87d686fe3252e8f4b96a1d6d05d07cf77608bfc5802d470a5c303be99a86e77fb5edbaeb232d90868f6397bf4eb7b927388cf6b1d1757265fbb4d874588c874e7556869febf4ba5bfa04c438b3e60eec5d679a0642c5082126fc3ad3fd0c00a26575ecbcface705be9a986ff41a4cdcf054e5372a3eafd99d07b888396f61568a6372d4c7aa7a6aea33f049a98945b0e52558addf23765059c6e6edd34bcb04aae55143540ac3f676bcb1134ccf05c24b652ffa0378bac5638d590fea17f875546c3d07cd6cc9885e002bc4b80083ac6cc5e6e2f6a3a9cab268b925f8ae97c3bbdf92fc0154ed456ffa1392c87ad9a1c5c3cf56d53610f341256526791a37720b4d42d5656fcc3f51be87e1d9218ac7cc077a421b724a504782faa3ad87edcc6b7aedc3bc608fa58876df24409deb7c21539205eb00cdf56c247d8a04edffd481beb9ee9678fb5c29a127e42fdb7099f051b8f7d79d3d54732a11735abebdb3f1d81b5fb31d08c804848e3f33fe72672995d3c5f5280ff6d96aff8839844e0c838a158cfa344d7a142ca87aa09089a6e22ab6c4e85d3f0facb8a309114f18205bb31614be34c6f354ab9968af9357ea5c520e7993bdc15961cfb01af90b70103e9d0e6753d23b6d96d78ef794613e642b4235d846867a063327e08c73d6ce16ef247cc0cd19864d064f5e8c4f5d40a971b526f4ddba222e0932b8425fa755be2e28799f12c8d8588bf2f93bbfc555b302c2ea5919d40f38c236541294c1a22f81deb780f349a17c9867b23f927b19366a98844843bff26105b64c8246cad3aa79ed6907bd14f7253641b597952c24a63540fd5e7d40af5c2400eb8f47eeea491758b1ac1d061c78eb2500f1c0627e25148dd47352978dbe8b183317d7a2766db5f53495f8ce3068ed12e6e473a516c19552f532a4416aad2551a3fe03791560fc4a94a57433f2eeafe8fc3e37822dde06c5638a411eb6e9532858d9396f9d8e31bb1dde168ab38fe3fa2fa42545e8706523d42895f3abc8654f5fc86705b7c8c79e16fd82b0e1543a23619a15b997a33c37c24bf43379d003fd3d31c81a51fb9ec2f87b0fa1a0a8eaba460511657991234e228d17dd8e3be5e4f2d353b83aba1f3fcab7b5e35c5d48fdfb0c23287e1ee578b1be34ad0463e5519dbade3a3ed515fd84959d3105626b294904fd207c996e49344e4dde08484a9b782ea1dc9e3fe3882662ce4980010aabf2c4b0d2b6a64091aadd1e5766640be5c8be79ae2ed9aff25190d3e23d16356a3c73a5c31e97c157fb1f96b6b39c9d6aacebc27389a8705f418bab9fad844e5d45d3c9841305b2b5327c42a1887618c16c56ecf5362fb61225269759d6cb6de1579cd7bbd6b714157112f616719ceae382592873527bfa8aa0de6ce36dcff51dca0068e0ac99f37e630f4ab1b08e0ced2c82d92de9e356525c7070bb36ce7bad55ecc52ff4be4d9d3c9c38d0fb12689ad54f109185b83e21a5865f433b151364dc9744921c660c5518114e3ff98f85397a7ee2e13f5d3352498ec7baea1ab333dddd082ee3b08a4cf2624fcf5f0e95237ba8bc42de9ac1d7d857071636943b43d727f4079f90f2ddd14036cd8242375ece879662f2388508229e16cfd40ecbce156b2992e49972344a9550d65342cc71fc834e896d98853a5fb8249ddbe9ee52f24217f719cee97dbdbedc5afbc19539dc8db2a3dd2a6e74515f826f2a73ab19b32cc96b1a4abd9a8577be250861d390f93f3f4e198cbc48ab79d1268f6ebfd1c7f60e3f44f7ceefbd451fc7909311a90bdd797e4198e48823d7334da06077092b6405070be0b8c9dc9d9f279499f6c4768f5c52ae36696b6b5326ec50ef1c983f0a94f901fadc125a4b8a0b1b9064733d439cfc5ad3f413429ac22f8423b2f6c380387a947b9505ae3db2319afe07e075a5e76a1a727382b80213f06839c8eb288d1e35e3f1d8f464e02485521c792e273ad03eb1bed0cd959723932acb30326af1b00471e7a136b6574b1b23b9506978f3956867fa9706c9e7c65648be7c1586f9a3bb22dbd1c978ad863ce626855681a41eb6370d571fd07bf86c5bf66d87fe8d50695a2dbc19417fa6e8c3365973c83cdaf844ca4d0f3b6969fb3b3dcc1014af025de5dad4b768423094c32cc95cbd9a6997d7b547007b68e4cd4bdee0578cc5618c84045e27047688bbc3b921d35008593b36c202dde073e765f2f27b4e514e3b2319c24bea7e616998894bc29ef1678de764fc758ce0b73ef7cb10ae3e73962439965e4257229d4c72bd9110ef799cbe125deacdf1862ee8f900069b5dcd3ac5ec28581fb02ef0d31f02d0d4ae2a392ea3fe12238e8ac4335faa658155c56bccec94be03e8ded3c71d22aff4baa14de2ff61b549eab58e123525e6fd3e3681128918f237896919b72564ddd1e7ce333c8245f4b3ba107fb3bcd1117a6c8e75abae4729eb285007498aae93553c1f84e052a1df25eeb7583f8af79ef47eeee1cfbf81b6fe87a48c4fbd3e07afc89363287fe66b15346f9cd00c8ea17fcb9ed5917366c122f4cf47b3e08ee108cce53f693eb6f278af7686d5a33f7ed2e4f029737385e45c98559ea8ffc7c693748d809c54afc61ae7545f87f8f7391d9a84ff96c2ef33ec22d2008ecf9aecb9aa0bfd0475d28ae6763e55eafce3249a3c538e93ba0316b4aa8f15468d82f6db11ed299d741291c38b0345dd33fe1f6903a8bf32209eda347dda04cf5ee00ed8be99526827c098d1567391034b40d5a6b84ae9b8776b06bae82877cfad233dc762d42deb2d0b9c74ff9b7d1a1f6f3db90a74ec7920742ee918aa450515c95a4fa1976ea46d5d27f770bf83aa6445eed5b03ddf89623a5305ec35f273634448087d62745a37aa18bdc86f7ae2887baa2d36b2371e5b4bc8248dd1f5d9b63303f7f16fad8bc880bde10370c7a41fd6fc68f75a35a8b35c730bca1f2d6fa8d988f29b21db11c84dd2f38801bf89d42d93d6b8138fde723f847d833994e44b15c095db24fe977e782634579bc6cdcaae8b44367f6d89987a20a1eaecb711bea61507fa44bcc9ca7c15e4952e768b497ffe453c60284ca7365e7c31ec7cee667fc0be5a6b26a6972d04671525090c9a6f9e4d5c54cd9c0e8612e003e3c013b0ec61c51054f90c165238f841070160cfb3ce8b94ad9a0a03851b5ca3e07e9c1cf033dbe3339380773297bd73dcdd94bf7b5ab0051d645b492b5100d6547690cd144a9986fe10cefb17844dcb7a5827a94a31864efe750d6329e1a226e2269057565d91eb69feb9644fff72450d95b2bad7bd7086771b5bc2f26be6311aba4252b32c28888c3a884a828251b3125ea85747ddf7d18cf18a938f3c5a9814417cc7ebdd6c7a1b4bffc4ed44c8ed2009a162fc958c24a0c6620e4fab2b03af5fa74cbba7482975d8ac308af2d02861c26a513d78fa0823c8305fbed8ae4a23c76643001362d2ccfc7cfc7d5145d0817475e59f9d5b335a01f985db09373925a3c897872948594959337e996c892e69debcf6e5769e18aef8b30f2d06e387565d8ef3c69ee068be4b1e1ca548965fe9cda28a3c5937849265c41f4177158778ac3c84be54094967859c1bd20cb7747757c1e1a2baf2e460a68839f1d26c66333a055ad711a45a6ce9a2090faed13da3fc360f851f5806d7e31f3d9339181c8a02ab7c05175f07e51b88b8faf9ec95b4b52e883188dc565815acc2ad987e97a595b1ecaf405b6a55d72934bc4d04ca12f6c9f87209041eb129974b9d01c2aad2f9cfd476e496fbd22c8ef2cc20ae9bcb537f7e4924ae925f2e9bf8b396bcef45d17b43da20142bd335807e22a250a009bd9b93e6e6cb8662ab7eac70fad47f7575cf8ba635688021f17071bc1f60d2ffe37e7712cb6fb7c6d2f1bdaf4b4775d57b9d630bed70e2c568c32f2511ac01fdd1970ee21bcb40810ae2447b218a72dcd824225aeaa3a2bb490ce123a88c4a8085469c130ba05e16f394122eb200ab448b08ae4367db57ed6cccea72ea137377a3f9c91952b651f476fd37145c42c1ac3009363360f29baa585a51d540ace4fa1ec226d6b52c6c7c3054a419fbc0311c557242c2db0fda772700c446eb53e8efdd3f0c2e358f59df534a43165e63e6e0b35e204613f47e1d7a9de74b0f56d03085a49781e77b0e073dff816ea251b9560db622aa71ad3adce7792e8b0549df4dee38b311d1f1911d5dd90fba7d4a74f1868587714350d6d252605bf149d7f48916d8bc21325a095693ffc01ce7130022a7303a1e6ae4d58063137ca07f63b9483fcccaec05e594aaf5b871f7d35bdfc96424a72254ee884d0df76fa5c0f21bf742bdc3bfb62dfda4a4cee7fa6ae1a1fe591ccdb55b54f9b75a722d7eb7e06a7a0181ee24e1807a40907be9e1666179d10697c057f9cb749d0293927fbabc3c8f4eca458f7af594f16e77abc8fac8258126a3707ad00e93e2185c36b0c1703788de47150dc5cf6080ff610296b3419722f528061dd28ffc33816c49e1f78c17d326b2e33f9e1acc612ca82120532bd0e2ec01b9bee0ff50298fe6ea7b4b48167e8485e7ab86d8054079ba16b6f99cff64ffdae8037d3c57783682854cbf476d6bbb7ef7808562020069adfd6dc3e4bafe48eb5fa0b82e3c35d596bbe0cb82de639215795eccfd43f42c6bc7036d6ea98ab373a6fb0031b8da2b73db245883658d65081b9dedeb4123bbba785a7a406781b6de63f928465fef25168af75b3de1957cc03f9915131bcca9081168c63db5e617649dcba5c455e303cf90fb9d686f5b780589dc134a5c7f8f571eb40a2d8904b3711520231db0de0e5fab54553548aad7c2c68c2b3e1597763a8ae8b16cb4b2918c9a8ce91dacdd4dd9d3ecba36c94b2cbe4168d424846320b8709634b92847ec5ce6443229c524bb8e8d61cd3825ffa512d86eeb4d7b908e3400d63b7c547be0c758c2ab514f2c514e00f21ae28ccca40bf91d92c71bbab289a8e3a0a63810c9dbb51b85037f8c9e50e90cb4942540a2e07d471bb6356a2566f55e4284d8dc19b4cfeafbf7da3b6d4ae6dc5d4cac97c3769578fc914f16a32b2e586ecd74ec12ec795efec4bda39417abb2327ec98e6a62ff9653319ce3eee533620a6b5088c5a6ee9a7dfa938ee025b880cc7f75f5b2e25093b13a6f5b9b75c764576d31d3702f37debaab875a76eefcdfb61624dbc28730db5e20c255ace64a06360723a1c7958821d124e56009a3a932c92be6b6448fa17c1d635e3d4927cb4a5e2417cfd2ed064b2448b186f6b3383b4261487", 0x1000}, {&(0x7f0000000140)="c5149d72b33ac67577829f2c95c93259db86d7f3f83fcb4e4c246730532b", 0x1e}, {&(0x7f0000000180)}, {&(0x7f0000002780)="23e8d53d4b443b20581f4aa19dbad8efa9d16fc6ba06fb8796ed3ad1b53264164ac24cf713c38857701525caf5e467befb5511fd230a668f36d62016046b2f14853f58401e0694ca19c72ab8a02b5440975993867edafdc39305b1a7cfec100c5274191756f96fd7d1269ca03b7c48f77728a9ad60ef4e8def2ae4ef5bb97c1fecfeaa73915ef760a397959dd50c56a149acf769a1fe7ccfa96db8bbd15c9fbcf4304ff4977202da7dbaa26805911ae1ff77c37eda534179ca061f72ea", 0xbd}, {&(0x7f0000002840)="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", 0x1000}, {&(0x7f0000003840)="94796d3dc8b41ba9043a3ab8f81a9a2d47dd7f0d1645fcc743c6a40e59c43f88e6ce931f1423779f46acba7c28e76a6394a770ae45a6bb4b0c379b6ba8856b81b37ffeca74b68fed6306eeff72ddc425c6b3670dbdf3d6178443c594bbbfd952d23bceae0642d83f3e5adbac6d838c4a31d4ed275fba07db849c917373fbd78ad5e7f8fd7fa66319d7e1e2f07bb168c5039da399d97e3bf87ce70607", 0x9c}, {&(0x7f0000003900)="b6b0a57fac5c344d9bd6a0694342f914732ddfd2f1c734a44acb04e9930acc6dff9f0f9f9faceafac893cd36b07bd73ec27ddff2bc011cfb11420ec471a38f5fa999c39b056581a202c9b5de93e6cf3afb98e2d6e2df7f529a2afc7ae051ba19e19a839ccb87d79cab3f45cde4dcdee1505e9285cd894fc08907c5cde45406fe59bd5fd78bff89d221c0ffb857388b1de6ae8605756178c2fceee5a458c9", 0x9e}, {&(0x7f00000039c0)="1560e88c5e0ccb9395bbd7efd84bd0f5a71ca689ca6988a0d4a6193f2bf8894b8b02d68471ab040857c1fed83aeeb19d69e218edffbb4360e6e5ab2629ab77a846d734b9d92ba96b5e9c2fc3b110125ddb042e5209759056076d", 0x5a}, {&(0x7f0000003a40)="251662a4f0d9bbe1ae98494db53e1bbc34b2cecdb25d434ee81cd88943814f85424b196400c68d576ca78016340723a8b1f0118fcf5b506aa29c5d6db67539eba3df4da25982c8047ffd032045dd930f58c68c3bc78634ee601770faae4325e9f27c7f4f3621c9b8ef9f903148990b8f646622ffd31130145167e0ac1ac91fbd9fe0ceb201db2c32ac0b8784d856f4b85978f96e597c8463f2d0f935ecd229360912205ce1aa61dfd0c472b3aee9fb2168af1930db07687d4ee8bf9624a979ab16e7646e14596f", 0xc7}], 0x9, 0xe) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000180)=0x4) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x8fff) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000040)={0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="85c1c09f"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e630c40000000a31c0000000000004006630440000018e725cb48400000000000000000000000000000000000000000000029000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000"], 0x0, 0x0, 0x0}) 21:51:20 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000200)={0x2f, 0x401, 0xc, 0x4, 0x1200}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video2\x00', 0x2, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) dup(r2) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x0, 0xa0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r5 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140001003a00000127bd7000ffdbdf250a000000afe958c3157c9097478aa500eb4a92883d75181eefb0a900000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000007}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) r7 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r8 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0x323) r9 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x8fff) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000280)={0x0, 0x400}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={r10, 0x702e}, 0x8) r11 = syz_open_dev$ptys(0xc, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r12, 0x407, 0x0) write(r12, &(0x7f0000000340), 0x41395527) ioctl$sock_ax25_SIOCADDRT(r12, 0x890b, &(0x7f0000000380)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$TCSETX(r11, 0x5433, &(0x7f0000000040)={0x7, 0x2, [0x1ff, 0x2, 0x8, 0x2, 0x1], 0x80}) setsockopt$inet_msfilter(r4, 0x0, 0x15, 0x0, 0x0) 21:51:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0xa) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[]}, 0x1, 0x0, 0x0, 0xc081}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x200000, 0x0) 21:51:20 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0xc06) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x323) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8fff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) mmap$snddsp_control(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x20010, r3, 0x83000000) 21:51:20 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) io_setup(0x3, &(0x7f0000000080)=0x0) memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x109000) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x3, r1, &(0x7f0000000100)="b6dcd2a723236e4ca78f7259be2629e757d5d5a90fbdcc0ab9d15d0ec79eb8c85399f67195c1b775509b6da8e254360219537b1298c3fd2f6717d90aeba331b5cd041dfd205da45870c1aaf66c4f836f3e8bf18d7c27ad0a1795d9e0ef6450dcd056114586e5a1b5b4a4cc4707c3bd5f8ff03bc1be045786bb7e3d76dcc55daf192aa7f3d60b5d53120203", 0xfffffffffffffd49, 0x7, 0x0, 0x2, r2}]) [ 2020.045342] binder: 22525:22540 unknown command -1614757499 [ 2020.072278] binder: 22525:22540 ioctl c0306201 20000200 returned -22 [ 2020.085871] binder: 22525:22540 unknown command 1078512421 21:51:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(r5, &(0x7f0000000180)="6b8821b168639f343ee50ed6a08dc3d1e747df8c6c4ca2e0cace8e8d054ecb101c5724baca218bbebdc3a9f7b7d891d4cd9c504fd176b5f211834fb217d33ac56264ffdf4696069d259622cc451c8fa97958de32652093e7f0473069c390c599254722f83101f2373a7711ad2ec53e79d0eb1101", 0x74, 0x1000c000, 0x0, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r7, 0x0, 0x8}, 0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r7, 0x800, 0x800}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r7, @ANYBLOB="00003f000286cee2ab1d946ee10ad2b66ff62f386551daefb908f073b76b53ea6d4e31e98f00bfe7d875ac88ce6e60824ce0aaf5e6684e7a67af98291a4547fe69e822"], 0x47) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000140)={r7, 0x7fd4, 0xffcf}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xffffffffffffff38, 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2020.095498] binder: 22525:22540 ioctl c0306201 200003c0 returned -22 21:51:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000400)={0x401, {{0xa, 0x4e23, 0x1000, @remote, 0x6}}, 0x0, 0x6, [{{0xa, 0x4e20, 0x8, @mcast2, 0x9}}, {{0xa, 0x4e23, 0x2, @local, 0x3}}, {{0xa, 0x4e23, 0x8, @local, 0xe4}}, {{0xa, 0x4e20, 0x5, @mcast2, 0x2}}, {{0xa, 0x4e24, 0xfff, @loopback, 0xdf}}, {{0xa, 0x4e21, 0xb58, @ipv4={[], [], @local}, 0xff}}]}, 0x390) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200002, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x2a, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="59a299db52a7f3b318581fe33000960f76e9e09c8e3346875109e3ba60251e717264a4d4744a70b0f82c"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x323) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8fff) r2 = dup(r0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x3, 0xa0) fsetxattr$security_ima(r1, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@v2={0x5, 0x3, 0x4, 0xffffffff, 0x2b, "690c98d9df03824e57c69bea9afb52b8506a0728d4d3c7fa40c62405df7c311913ac455e9ce08d8bef68a4"}, 0x35, 0x2) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0xe4) dup(r4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x15, 0x0, 0x0) [ 2020.747735] binder: 22525:22553 unknown command -1614757499 [ 2020.753865] binder: 22525:22553 ioctl c0306201 20000200 returned -22 [ 2020.761628] binder: 22525:22526 unknown command 1078512421 [ 2020.768034] binder: 22525:22526 ioctl c0306201 200003c0 returned -22 21:51:21 executing program 1: r0 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x323) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8fff) r2 = gettid() tkill(r2, 0x3c) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8fff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000001780)={0x30d4, 0x8, 0x400, 0x70bd26, 0x25dfdbfc, {0x15}, [@nested={0x1094, 0x22, [@generic="d89bcbb94303380343105a9bfc36542675078f3440d049f5160228a20815164fcbea53a4782cc4324093a2e7f533d16135667d41c3460a8e569cf1d1b1b5e180732c7732150551d15a9588f9f6d616ddcbeaced5ddc1f455128961914783c4a5fbad3f4885f3f559aecb43f71d689d0debd892e2964f7d21e36fb8df0e8488bdd2402577a239f64fc5f198070ae2d159", @generic="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"]}, @typed={0x1c, 0x5a, @str='GPL\\\'bdevwlan1/-wlan0\x00'}, @typed={0x8, 0x4, @pid=r2}, @typed={0x8, 0x76, @uid=r5}, @generic="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", @generic="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"]}, 0x30d4}, 0x1, 0x0, 0x0, 0x4000002}, 0x40000) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010e542bd9713544caca85cd20000000095c4488730d535116892b704fb5bb0f2b04c0f236e40c66d8330534733ae50f0fab552f557099541ab2ad1afe2843da7a9a1b9cb92147e173e874b0f487d25a1c9cefe1f4be0e2cefe4fb78414247f606be1756bb11e7bc669514199e82e55d81f0e22890693ee45970273f29614c5a2a4e656713afd4da99bac7f07fedce7f72e9e79c356085c81fd119aa397d4019b8606c71b3ce7880cee3bd359e07059e9ff7cbbdd633c38e03d0ca891ae5dae10ff79a452725fd9aa821ff2211507474d7f1a088c512c2a5c4d247b79ce3251d97804df655d446511b81d5f4ecbd2e28c4f85467fdfdb781413818b07b052205a97624c5c0d086c34588d9a7d1667e400fb6c177cc048", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080088a8ffff"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 21:51:21 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)={0x0, 0x7}) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) 21:51:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x93872f499065bd43, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x6, @broadcast}]}}}]}, 0x38}}, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x4) write$selinux_context(r1, &(0x7f00000000c0)='system_u:object_r:tetex_data_t:s0\x00', 0x22) 21:51:21 executing program 4 (fault-call:3 fault-nth:0): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 21:51:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xeb, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0563044009dae2e4505b0bebed5bc03cb939c6c4efb4ee538ff890df312888296e99b9571bd0465c0f1757532a8401dfb7c1c95b0c5a1b2f07830547a938992626f724389e2f9f1fca9b47fd2fa3f6e8cb21bc5e97473deb929d7e1f162764174fb73a1ae846b2581dbb03af77acfdddc4f14f6f25eaca8a5674113c25b18cb710f397702eed63a5a3ca7bf99329ee51736208ccfb24411cc03d37014413e13d5973c8b1c20e5c62a6aa95cd71a75696fb771cb5df8d01abafd7af165acbbbefe6c6fa00e88fff4c004e4973591f3a0b6a01db5e13aa0f7d04de3bae0203ad07cd3e456de770582c45a1e4"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) 21:51:21 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)={0x3, 0x1b4}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x58, 0x12) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x1ff, 0x3}) 21:51:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) membarrier(0x40, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) [ 2021.161063] FAULT_INJECTION: forcing a failure. [ 2021.161063] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.194957] CPU: 1 PID: 22584 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 2021.202890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2021.202898] Call Trace: [ 2021.202918] dump_stack+0x142/0x197 [ 2021.202937] should_fail.cold+0x10f/0x159 [ 2021.202955] should_failslab+0xdb/0x130 [ 2021.202967] kmem_cache_alloc_trace+0x2e9/0x790 [ 2021.202980] ? do_raw_spin_unlock+0x16b/0x260 [ 2021.202997] binder_get_thread+0x1b8/0x750 [ 2021.203011] ? __might_sleep+0x93/0xb0 [ 2021.203028] binder_ioctl+0x18f/0xfcc [ 2021.203044] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 2021.203059] ? __might_sleep+0x93/0xb0 [ 2021.257211] ? __fget+0x210/0x370 21:51:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) [ 2021.257237] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 2021.257256] do_vfs_ioctl+0x7ae/0x1060 [ 2021.257268] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2021.257278] ? lock_downgrade+0x740/0x740 [ 2021.257290] ? ioctl_preallocate+0x1c0/0x1c0 [ 2021.257303] ? __fget+0x237/0x370 [ 2021.257337] ? security_file_ioctl+0x89/0xb0 [ 2021.257351] SyS_ioctl+0x8f/0xc0 [ 2021.266330] ? do_vfs_ioctl+0x1060/0x1060 [ 2021.266348] do_syscall_64+0x1e8/0x640 [ 2021.266358] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2021.266376] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2021.266385] RIP: 0033:0x45a919 [ 2021.266391] RSP: 002b:00007f8504383c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2021.266403] RAX: ffffffffffffffda RBX: 00007f8504383c90 RCX: 000000000045a919 [ 2021.266409] RDX: 0000000020000200 RSI: 00000000c0306201 RDI: 0000000000000004 [ 2021.266415] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2021.266421] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f85043846d4 [ 2021.266427] R13: 00000000004c2162 R14: 00000000004d7298 R15: 0000000000000005 21:51:21 executing program 2: r0 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x323) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8fff) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}}, [0x81, 0x4, 0x80, 0x200, 0x7e23f561, 0x1, 0x6, 0x5, 0x5, 0x5, 0x1000, 0x6, 0x6, 0x100000000, 0x101]}, &(0x7f0000000280)=0x100) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={r2, 0x80000000}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x8000, @dev={0xfe, 0x80, [], 0x23}, 0x3}, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3ff}, @in={0x2, 0x4e23, @empty}], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) [ 2021.308654] binder: 22586:22593 unknown command -351577264 [ 2021.369137] binder: 22586:22593 ioctl c0306201 20000200 returned -22 [ 2021.383971] binder: 22581:22584 ioctl c0306201 20000200 returned -12 21:51:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8fff) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x226, 0x6b55815f27812a4b, 0x3}) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x40) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f00000000c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$getflags(r6, 0x4ca6275e0113d43) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1ff, 0x40a00) 21:51:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fcntl$notify(0xffffffffffffffff, 0x402, 0x8) 21:51:21 executing program 4 (fault-call:3 fault-nth:1): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 21:51:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x800, &(0x7f00000000c0)="8c468cf1fd290ba08f059e5e43d5c1e3ac79fe9672ca46dac0bf37d6a9627d96f754801e1942403235291384032e0ba6c73fc34791ff107110745d99d5f19f207c3191a52445d2144b5f148108382a1ff93f3053815f5f18ed56dd02a59c313828065abaa9d0de7801e09b964eef733027c51e279049b1544a9d713792c065c7cbf00aabdc23e50394d216") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00020440"], 0x0, 0x0, 0x0}) 21:51:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000100043bd00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00566678010062726964676500000c0102000800080088a8ffffb4aa1523add9d7b787d779ef633437ab32855e189b686a47be508717939abfae433f556f71455e2664cb063a6860b5ab149112d4218aac32b551772ce3663a5a3a2d7bf4268c72a009b6c984d06d8bee75b3"], 0x3c}}, 0x0) 21:51:21 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x18200, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0x323) r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0\x00', &(0x7f0000001e00), 0x4000) recvmmsg(r8, &(0x7f0000001d00)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000300)=[{&(0x7f0000000880)=""/157, 0x9d}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/138, 0x8a}], 0x3, &(0x7f0000000680)=""/30, 0x1e}, 0x3f}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001a00)=""/12, 0xc}, {&(0x7f0000001e80)=""/93, 0x5d}, {&(0x7f0000001ac0)=""/48, 0x30}, {&(0x7f0000001b00)=""/171, 0xab}, {&(0x7f0000001bc0)=""/21, 0x15}], 0x5, &(0x7f0000001c80)=""/86, 0x56}, 0x3}], 0x2, 0x10102, &(0x7f0000001d80)={0x77359400}) sendfile(r6, r7, 0x0, 0x8fff) r9 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/relabel\x00', 0x2, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r10, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) io_submit(r0, 0x6, &(0x7f0000000840)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x24c9, r1, &(0x7f0000000180)="b721d19a5f0417a09c6d2099f294e72fe5e870bd8b5e04e40406e793423a3072063b39baf4f9e8903fe258bfd773dde4da43c2f0c5fc39b82e3c6c0423daf85e6d3ccdecca9e20c869fcc4ca1db1424f41d43fc8d25f8b2581c1c5e8e70d5f7eb069a8262693b686ff3bc41127153908f53b89474d5461e058c8c39985404e942b4c75f23c15fd83372c9f50ed8da256cd24cb1ab6ffabb84ee1e6", 0x9b, 0x5, 0x0, 0x3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0xfe00, r2, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x2, r3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x1, r5, &(0x7f0000000400)="166e88cfceb029e1b3888e1fef5a8f732b2bde9f4f9befd99a4ebb0f5c9a58b6eda0995fc4cbade7beb069675b3ebeb8aaeba4a5148c39612f09875a3c7080f467b026a6e5268a684ca217f3db3962d7b6e507a8115a21b129b55ef3e40777da6246d2ca51f59c7271ec2c7a9daa45b92464f5bf803c918e0625e34c5f792805696295a86873fd13c66b7b2f5106e095", 0x90, 0x0, 0x0, 0x1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x6, 0x81, r7, &(0x7f0000000500)="fb638690f2bfb3962edc057e70671d220f4ece22f6d041d7f2ea48c6ab67e062023ebc279d3542476da3b12b20c6aaf8ed95c7ad555bb432604c1a6604962aa4b8725bad4567662a4b4d5ccffc40bfdce33ce1452d6df4de433d29471c9f5dbbda9ff8fb2167b83e8e8d5e1c9c40ab698519185580aaf3eca3caaa5e091572c624a91cca587853f33a75ea0eb6c8cf6df731c3761622ec8676c47955acdf90bb12243a9692f4f0c185c088d43056fd9bcb2fee6556061b8d9c52a96a6388c5f906d5f3dd33564eba426ec2b5274e556670456399a888642410e8889916543be7b49fb49142135c6b596eb76d960d14d29188ec18cc990054", 0xf8, 0xfff, 0x0, 0x1, r4}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0xfff, r9, &(0x7f0000000680), 0x0, 0xffffffff, 0x0, 0x2, r6}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x800, r10, &(0x7f0000000700)="6011b00d3bb3f8a06e469254c2fd12ca6cff5f9840ece903808d3e12ab8837ade8afd99cddb1f6507aa68433db11a722bb1c9136c683b47291a4186bdccfffe1e84a885f5ebde92e91518a90aae45f00992da47ded5a0268af518ed45eb74fdb9ecdbb6179185dbcbe3a9b71ca2afa1b1a3a956383ea7417582cd8165b7d26c7fb88dd454c7184fa3904a11a85377f44e8198b58f46bb2c9246f4230087bbf408f704859df67271cef99dcbe6093a6ef1605ab600134b619542ad62a5768275a8448a54a53d39dbdac48d0c3", 0xcc, 0xff, 0x0, 0x0, r6}]) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.apparmor\x00', &(0x7f00000000c0)='trustedem0md5sum\\GPL(\x00', 0x16, 0x2) [ 2021.779482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2021.817960] binder: 22616:22619 unknown command 1074004480 21:51:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x100000001, 0x210040) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={&(0x7f00000000c0)=[0x7], 0x1, 0xad1, 0xffffffff, 0x2, 0x10001, 0x2, 0x800, {0x5, 0x6, 0x8, 0x101, 0xffff, 0x8000, 0xfffb, 0x6, 0x4, 0x80, 0x1ff, 0x9, 0xfffffffb, 0x0, "839d1131b48ad53e4750f798b70dc9fae9483f7125897ddad2ddf2713c7f7794"}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) [ 2021.829697] kauditd_printk_skb: 14 callbacks suppressed [ 2021.829706] audit: type=1804 audit(1577137881.961:8926): pid=22617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir593238974/syzkaller.IePVN6/1815/bus" dev="sda1" ino=17906 res=1 [ 2021.834988] binder: 22616:22619 ioctl c0306201 20000080 returned -22 [ 2021.840592] FAULT_INJECTION: forcing a failure. [ 2021.840592] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.886173] CPU: 1 PID: 22621 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 2021.894115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2021.894121] Call Trace: [ 2021.894141] dump_stack+0x142/0x197 [ 2021.894159] should_fail.cold+0x10f/0x159 [ 2021.894176] should_failslab+0xdb/0x130 [ 2021.894186] kmem_cache_alloc_trace+0x2e9/0x790 [ 2021.894199] ? do_raw_spin_unlock+0x16b/0x260 [ 2021.894218] binder_inc_ref_for_node+0x1ff/0xba0 [ 2021.894238] binder_thread_write+0x11db/0x2200 [ 2021.894249] ? perf_trace_lock+0x109/0x500 [ 2021.894271] ? binder_transaction+0x5e80/0x5e80 [ 2021.894281] ? __might_fault+0x110/0x1d0 [ 2021.894299] ? lock_downgrade+0x740/0x740 [ 2021.894327] ? kasan_check_write+0x14/0x20 [ 2021.894341] ? _copy_from_user+0x99/0x110 [ 2021.957872] binder_ioctl_write_read.isra.0+0x189/0x860 [ 2021.957890] ? binder_thread_write+0x2200/0x2200 [ 2021.957902] ? _raw_spin_unlock+0x2d/0x50 [ 2021.957920] ? __might_sleep+0x93/0xb0 [ 2021.957932] binder_ioctl+0x2fc/0xfcc 21:51:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000040)={0x800, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="076304428267ad93b43a1494199ba350f8157cf01116b0e5ed6f65147d2d7f0bf455b418cac2a04e32c18c9321b959746727d24466752602fa06107b31814cf035da8a5bc662ecdc08c83d0ef5bd0937debd8f4897b1f1877f333f56036488"], 0x0, 0x0, 0x0}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000002500070500000000000000001a0000a6", @ANYRES32=r8, @ANYBLOB="0000ffff0000ffff000000000cb40100677265640000000004000200"], 0x34}}, 0x0) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000001ec0)={r8, 0x1, 0x6, @random="bdd6e29adb77"}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) r9 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)="1801687a5ebe874b84df767eaac5b99d49be587f546447998a4550578387384f0fbd66362b8db3396f2e1908c731f5b7ca36fea3d05ec1cb426d4d29b0ebe4de96072aa43f1bae76c9d48ca247eb53d0fdc25b733bd59cb9183750cdfed037397c6c66c4d62b94fb922b6c85a371e1cbe3e1e48678248faac0810101dc72ee50b22436f276e146e1938fe3520060faefc0b3572d83b3edfd995d3df44d3a49485316fc00765ec472213bb893603671cba0c3550c72456d3dc8416e9c00c26e5a104f519f6c42af9f", 0xc8}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="ac7682c0bf999e44549abd477b93f5c594e47fe4ce94f1497f7c42826be6c22778b874a9b3c9393225177f82f00ba435d59f5e99b6dbe7365c747993d56a65aaa4070a68f017fc89f9b71693e0bc5193167bdc3b5037a63bc08492c8ee69b08e9c117ae4b3227ae98abd7bf436d3e084f0472bfdb2658ec8df6c0b27c06a122c5a5981fe0c9ad33882b3add6fd5f394b600ce7ac6ac71000ea80b582722e87b788231e97765b277afdf2e65ccff286d16a2e9798928d07ab9a9c58a88ef9dac2078e1ca7237e8388454784dbc612708071cd0571392e3eee7bffc12c3eb6f1b93d2060862274f7aecb2c2c9c516244c3838c4e3c59eb", 0xf6}, {&(0x7f0000000280)="4062bae48f357e", 0x7}, {&(0x7f0000001780)="f117f0571aefa9281854a80d43f88f9e912e54bd921ad19ed9eda544ec3d15dd7be30ab80b065835bba288e71475cfa52b3ea151c356a12a28289ea7e174258dc4b6c15cba9edd4057df0949ee0779fa68b941a9782cd8ee979c50922a0167aebd52b26fc3355f870d6a32c955167c0593cfab6d5e9989287d7b1e9d3691932b65aff23e41017e8b0edf556bfc01dae70cf47b70a127a3ab3d61e5164e4dce17cb54f6e1956b26daac2c9610", 0xac}, {&(0x7f0000001840)="96e441241e09ea5fec0364a77b95686fc31b9c3a3ff03cbdcaa2f98e62505d948c86b4439800e73d0b4721bee0eabfee391f2a84a730b172410ebc7edfcadaf0804c398f75028c09b50a9d6daf4435ae795f6975e39fc824f5796c27cbe859aa1a20484a8a484c65144bf219ca7117a9a88ab189aeb0dfe0bc7bd23df5364e9d45a83908331516f557819fc13c9c2363b2996291c436c93c065ca160e58e6171d51dd2e2340a791719b20e4700f6648a3aba025786fe13e91f692a9116270f804b7c5243fcee3f78e1f3f42c5a410e8a25b95d09de9375190b19891f5472d6", 0xdf}, {&(0x7f0000001940)="4197299bb67a11607845ff0f040b42d823f1046a583e378cf9b3782cca2a0a6702fb31a219feeec815dd24addd21c34a06bb0da8c6655423d7452c6cdd936c76812b021e5c48e58a0c0cbabdaade929820887b1bb3951308a75b0941f7a69ba3e73a8592b166f5b43d443567eef887f7a8600973f5736685fc243f1a72cc470cec70217d3b21cd847247e9d27776523d9fcbd2d08fd041db5d62993b3e1d1be2b9ef772aafa00dfb31c3f73356af24681c31b7fe424392a8e4e484bf2971a00b85959acb762bf6eaecd6de07770d62ed0e29fd23b3a2306e5b1c8af886021b680e", 0xe1}, {&(0x7f0000001a40)="cfb2c30c0f6f7e533dedfc2f860a4f02477534847cdc41cf11b4b5635aafcd35349f4133b83001c89763b4e3a29e52c879f7d1f16ac2330689ff74fb19cd6a314246d5d4dc8cde799478e75c1a71bf6701a10b58fbdf323b29e3b593f6741aa732efe2cf41747bbe0008f91c68c06c039de756c5e07808bc9791eb87139129a3bf5fd275edbda957100e71f09ac9d0f0b98b13224a4d10dc4685dcc91bc66af4", 0xa0}], 0x8, &(0x7f0000001b00)=[@iv={0x90, 0x117, 0x2, 0x78, "baa78a36e8e4462b605e3b05c3c713d598466603fc068037ccba0d9a1862993e4d582a783d45676120299cf1afca79108ed223d7fb5df792344308f84d30169428b96ea2d00981683462f06ca46311b7be38b2912eaa3799714988c8ee2287258da2a22f8dccf2bd70c9818c2d954a05a5cdf082953538b9"}, @op={0x18}, @iv={0x68, 0x117, 0x2, 0x4d, "18f51ee596713afce2949dbe623a6d8186c6d6a8ccdf93a9e0386ab99890c3ba76539fcb7d1b62b00066f3b3edfae0f539a01660fedfe3940085552140c54f9c129cd5078fc03d096bef95e651"}, @iv={0x100, 0x117, 0x2, 0xe9, "3bb4925c237dae48cf0be0880dc7da6a0f7818fb81e1f6ebcc2966ea73811a7673eccb6beaeea75329ff6ffbeefd0ad0e385296f315927054d0f59e4973bf6ac6a0f484abca62090d0d3cd934225f89b1c8efc52805021a2bfbea37f44fec61b2480ecf4d18f92a5ec0eaf787dcaabcea3bd010529b66e7d4a5456ae9a86b6aebd7aa2e66f83bdf017abfa8935ae04cfcd760a69011ac9a34b852160ccc0be1147bc6ae720698e875e594138fc7c14eab266efb861a98a46dab8ca78a2d6d4ced3ad90e95cc16825e8b972a535709c5a90b0c3fa5c6e100104fcc3633f9bab2cc8353d409b30de6ebf"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x80, 0x117, 0x2, 0x68, "10ddc62532f47bb3f7c26a0a3c2f0271c19cf05e7eb562108cd9065ad51a4f9fb2913ee6110c3bd684dce2493ec8b7cbc85807e07eec697790e5ab336d8cfa004f0832aa24d1b29dc7589fd0a1203cf647c28a17e49f3413152b7c4ce7a4fde67048db892bd4107f"}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xb0, 0x117, 0x2, 0x97, "907d67fa905270b6b5ed51dcad5da3b4f03a1e8bbf02a774ea6a28f6d80b2d38aac20efe38d16f9af4e8da012174478503ec4441f039ab0b500542c4779b322c3d8ad2798b44fd0479a8dc9384111959006fe8135cd37872e2449a33c05af7ba5d6ee084e644a6de503be1f3dac866cc37a078ab57c79f46922a220c82245c3289298966066e29781f86a506c1275d74b9c515b2377370"}, @op={0x18, 0x117, 0x3, 0x1}], 0x388, 0x40}, 0x800) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r9, 0xc0505510, &(0x7f0000000100)={0x123e, 0x6, 0x0, 0xffff7fff, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x281, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0}) [ 2021.957948] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 2021.957963] ? __might_sleep+0x93/0xb0 [ 2021.957975] ? __fget+0x210/0x370 [ 2021.957995] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 2021.958007] do_vfs_ioctl+0x7ae/0x1060 [ 2021.958021] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2021.958031] ? lock_downgrade+0x740/0x740 [ 2021.958046] ? ioctl_preallocate+0x1c0/0x1c0 [ 2022.019801] ? __fget+0x237/0x370 [ 2022.023284] ? security_file_ioctl+0x89/0xb0 [ 2022.027713] SyS_ioctl+0x8f/0xc0 [ 2022.031089] ? do_vfs_ioctl+0x1060/0x1060 [ 2022.035257] do_syscall_64+0x1e8/0x640 [ 2022.039167] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2022.044036] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2022.049239] RIP: 0033:0x45a919 [ 2022.052440] RSP: 002b:00007f8504383c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2022.060165] RAX: ffffffffffffffda RBX: 00007f8504383c90 RCX: 000000000045a919 [ 2022.067449] RDX: 0000000020000200 RSI: 00000000c0306201 RDI: 0000000000000004 [ 2022.074735] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2022.082013] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f85043846d4 [ 2022.082020] R13: 00000000004c2162 R14: 00000000004d7298 R15: 0000000000000005 [ 2022.089053] audit: type=1804 audit(1577137882.021:8927): pid=22631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir423096274/syzkaller.0IKwTW/928/bus" dev="sda1" ino=17914 res=1 21:51:22 executing program 4 (fault-call:3 fault-nth:2): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 2022.128476] audit: type=1804 audit(1577137882.221:8928): pid=22617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir593238974/syzkaller.IePVN6/1815/bus" dev="sda1" ino=17906 res=1 [ 2022.157988] binder: 22630:22635 unknown command 1107583751 21:51:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0x0, 0x2) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x8, 0x18}, 0xc) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xb1cf8c4111a1f63e}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x170, r5, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x118, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x28ad}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1a4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x62}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40000}, 0x20000051) getpeername$inet(r2, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000100)={0xee, 0x1f, 0x26}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$KVM_SET_TSC_KHZ(r6, 0xaea2, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05db401c0ff4dc56032eb5c827cb69ef630699a8c70520a2cc42d3c67ee58ad857507ff37417af9b8b69759efdafba2339a6429b6ae0141d6fb06e5acbff"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x0) [ 2022.194457] binder: 22630:22635 ioctl c0306201 20000200 returned -22 21:51:22 executing program 4: write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x4}, 0x10) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 2022.293509] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2022.311239] audit: type=1804 audit(1577137882.451:8929): pid=22646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir509740448/syzkaller.yA8vW3/1167/bus" dev="sda1" ino=17916 res=1 21:51:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x27}}, 0x3e8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@local, @multicast1}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:22 executing program 2: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd62, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x202, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0x9f0000, 0x7fffffff, 0x9, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x40965, 0x1000, [], @value64=0x7e858c43}}) [ 2022.321519] binder: 22630:22631 unknown command 926363952 [ 2022.359148] binder: 22630:22631 ioctl c0306201 20000080 returned -22 [ 2022.413239] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2022.431985] audit: type=1804 audit(1577137882.551:8930): pid=22638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir423096274/syzkaller.0IKwTW/928/bus" dev="sda1" ino=17914 res=1 [ 2022.479101] binder: 22643:22655 ioctl c0105303 20000100 returned -22 21:51:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0x502d, 0x9}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) setreuid(r4, r7) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES16=r8]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) wait4(r6, &(0x7f0000000100), 0x4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00'], 0x0, 0x0, 0x0}) 21:51:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000080)={0x8, 0xdd, 0x4}) 21:51:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = semget$private(0x0, 0x2, 0x48) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000140)={0x0, 0xffff, 0xfffffff7, 0x7, 0x2, 0x5, 0x4, 0xffffffff, {0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x0, 0x5, 0x2, 0x4, 0x5}}, &(0x7f0000000080)=0xb0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r4, 0x8, 0x3, [0x3, 0xfcc8, 0x9]}, 0xe) semctl$SEM_STAT(r2, 0x0, 0x12, 0x0) semctl$GETZCNT(r2, 0x0, 0xf, &(0x7f0000000240)=""/253) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40000, 0x0) mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x41010, r5, 0xe6000) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 2022.628733] binder: 22664:22667 unknown command 536871296 [ 2022.643058] binder: 22664:22667 ioctl c0306201 20000200 returned -22 [ 2022.652831] binder: 22664:22667 unknown command 64 21:51:22 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0xffffffff, &(0x7f00000000c0)=0x0) r1 = memfd_create(&(0x7f0000000000)='+\x8b\x8a\x16\x11j\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94SH\xf8\x98\b\xday\"m\xf2\xcd\xe1!\x01\x981\xefY\xf6^\xb0\xb3\x15|\xf5\xcdd\x01\xefL\xb0s\x90R\x13oj\xd80\nFb\x03\x8d\x11\f\x9c\xb7z[\xfdD\xcf5\xc1\x06\x03\xd1\x88,\xb9\x17\x0eByc\f\xb9tM\xd4Q\fL\xa8\xcb3<\xe1\x19\xf9l7s\xe5\xf0\xce\xc5\xfeJ=\xb7\xaeu\v\x88\xbb*\x80', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) 21:51:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r0 = gettid() syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') tkill(r0, 0x3c) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net\x00') r2 = accept$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) r3 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffd5b) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x101, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e22, 0x4, @empty, 0xffff4904}}}, 0xf) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) r5 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r6 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0x323) r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x20000, 0x0) sendfile(r6, r7, 0x0, 0x8fff) setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x15, 0x0, 0x0) 21:51:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fcntl$setpipe(r4, 0x407, 0x42) fsetxattr$security_selinux(r3, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:agp_device_t:s0\x00', 0x22, 0x2) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x7) [ 2022.690223] binder: 22664:22667 ioctl c0306201 20000080 returned -22 21:51:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8fff) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000040)={0x9ebf, 0x9, 0x4, 0xe000, 0x1, {0x77359400}, {0x3, 0x2, 0x4, 0x4, 0x5, 0x2, "69e561dc"}, 0x6, 0x3, @fd, 0x8, 0x0, r4}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f00000000c0)={0x8}, 0x4) 21:51:22 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = socket$caif_seqpacket(0x25, 0x5, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'veth1_to_team\x00', {'ipddp0\x00'}, 0x6}) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r2 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r1, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000280)="04", 0x1}]) [ 2022.845118] audit: type=1804 audit(1577137882.981:8931): pid=22687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir593238974/syzkaller.IePVN6/1818/bus" dev="sda1" ino=17912 res=1 [ 2022.926778] audit: type=1400 audit(1577137883.061:8932): avc: denied { relabelto } for pid=22684 comm="syz-executor.1" name="" dev="pipefs" ino=378770 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:agp_device_t:s0 tclass=fifo_file permissive=1 [ 2022.977055] audit: type=1804 audit(1577137883.111:8933): pid=22694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir593238974/syzkaller.IePVN6/1818/bus" dev="sda1" ino=17912 res=1 21:51:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000002c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x1001, 0x3}, @fda={0x66646185, 0x0, 0x2, 0x8}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/211, 0xd3, 0x1, 0x2f}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0)='IPVS\x00') r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_pressure\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f0000001500)=""/89, 0x59) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="24e90000", @ANYRES16=r2, @ANYBLOB="010125bd7000fcdbdf250300000008000400050000000800040009000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x14, 0x0, &(0x7f0000000440)=[@acquire={0x40046305, 0x1}, @enter_looper, @decrefs={0x40046307, 0x2}], 0x1000, 0x0, &(0x7f0000000480)="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"}) 21:51:23 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) syz_init_net_socket$llc(0x1a, 0xed4d433c0f9aba15, 0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) 21:51:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000040)=0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000080)={0xffffffff, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x88) 21:51:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x3, 0x70, 0x3, 0x0, 0x0, 0x6, 0x0, 0x59d, 0x3000, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1000, 0x1, @perf_config_ext={0x40, 0x93f8}, 0x40, 0x8, 0x5, 0x2, 0x0, 0x1, 0x8}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:23 executing program 3: rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x204801) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000180)=""/233) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r1, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000280)="04", 0x1}]) 21:51:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0xbd, 0x2, 0x5, "e613aba20980040000000068308c5d67", "966111bf3fdd6910ac25311644bf0bb0a20836425948c5cf3f1a7c91775b664fec68c8c71d7e88d9cdee5fca9573c6ad57f309e44db31f05e1847c5cec300eec21a661e49a789424cbdd80f9c0141e923487d7188578decf99ea1cc2a61e82d13b2c2a5c638eb9be3dca4c59b74c81df1c8a6c4d99de5afab59de2db4d915f1f19d91f000000143bebe3e8c3928aa8b0497187e17f4b9f3b2e2d7c912c5680760986330cc875393f"}, 0xbd, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 21:51:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 21:51:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) 21:51:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x40008) r3 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x154c, 0x1, 0x5, 0x3ff}, 'syz1\x00', 0x2a}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x15, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000040)=0x401, 0x4) 21:51:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:23 executing program 3: setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) 21:51:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) getitimer(0xfe53aea5a2a1c9ad, &(0x7f0000000040)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:23 executing program 0: r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000d15000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x2000) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000040)=""/165) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x200240, 0x0) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000400)) 21:51:23 executing program 2: r0 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x323) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8fff) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup2(r2, r0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000002500070500000000000000001a0000a6", @ANYRES32=r7, @ANYBLOB="0000ffff0000ffff000000000cb40100677265640000000004000200"], 0x34}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r11, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000002500070500000000000000001a0000a6", @ANYRES32=r11, @ANYBLOB="0000ffff0000ffff000000000cb40100677265640000000004000200"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x17d, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x93872f499065bd43, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4080, 0x48401}, [@IFLA_PROMISCUITY, @IFLA_MASTER={0xffffff5e, 0xa, r11}, @IFLA_EXT_MASK={0x0, 0x1d, 0x74d7e7ed}, @IFLA_LINKINFO={0x0, 0x12, @ip6erspan={{0x0, 0x1, 'ip6erspan\x00'}, {0x0, 0x2, [@IFLA_GRE_REMOTE={0x0, 0x7, @remote}]}}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 21:51:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'veth0_to_bond\x00', {0x3}, 0x400}) 21:51:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) setsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) [ 2023.878349] audit: type=1804 audit(1577137884.011:8934): pid=22754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2888/bus" dev="sda1" ino=16730 res=1 21:51:24 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000002500070500000000000000001a0000a6", @ANYRES32=r4, @ANYBLOB="0000ffff0000ffff000000000cb40100677265640000000004000200"], 0x34}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x800100000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000040)=@framed={{}, [@exit, @ldst={0x2, 0x2, 0x2, 0x0, 0x0, 0x30, 0x10}, @ldst={0x2, 0x0, 0x0, 0x7, 0x0, 0x2}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x85, &(0x7f0000000280)=""/133, 0x40f00, 0x17, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x5, 0x6c6, 0xfff}, 0x10, r6}, 0x78) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x48}]}, &(0x7f0000000080)='syzkaller\x00', 0x10000, 0x1000, &(0x7f0000000240)=""/4096, 0x40f00, 0xe, [], r4, 0x17, r5, 0x8, &(0x7f00000000c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0x10, 0x0, 0x9}, 0x10, r6}, 0x78) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 21:51:24 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/cachefiles\x00', 0x31c343, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000002800)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c81"], 0x0, 0x0, 0x0}) 21:51:24 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c400000000000000000000000000663044000000000116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004cbf11f2bc04bf749a64d71a9397a1bf10238eaf"], 0x0, 0x0, 0x0}) 21:51:24 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x2000, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x12000, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000380), &(0x7f0000001740)=0x4) io_setup(0x3, &(0x7f0000000080)=0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r6, 0x10, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x100) r7 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0x323) r8 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x8fff) r9 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0x323) r10 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x8fff) r11 = gettid() tkill(r11, 0x3c) r12 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r12, &(0x7f0000000000)=ANY=[], 0x323) r13 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r12, r13, 0x0, 0x8fff) r14 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r14, &(0x7f0000000000)=ANY=[], 0x323) r15 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r14, r15, 0x0, 0x8fff) r16 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r17, 0x407, 0x0) write(r17, &(0x7f0000000340), 0x41395527) write$binfmt_misc(r7, &(0x7f0000000700)=ANY=[], 0x0) r18 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r18, 0x0, 0x8fff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r18, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r19, @in={{0x2, 0x4e23, @multicast2}}, 0x1000, 0x6}, &(0x7f00000000c0)=0x90) r20 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x800, r20, &(0x7f0000000480)="a058259fb024e35f3d74010da35ecbf200"/28, 0x1c}]) [ 2024.002185] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2024.032279] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2024.083004] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2024.098344] audit: type=1804 audit(1577137884.231:8935): pid=22761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2888/bus" dev="sda1" ino=16730 res=1 [ 2024.122002] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2024.134950] binder: 22773:22777 unknown command 33068 [ 2024.142742] binder: 22773:22777 ioctl c0306201 20000080 returned -22 [ 2024.156848] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2024.165025] binder: 22773:22782 unknown command 33068 [ 2024.171216] binder: 22773:22782 ioctl c0306201 20000080 returned -22 21:51:24 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c400000000000000000000000000200044000000000116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005ee29a072eb7cce2c094caf67dbd75d6e3455b3069feb56584d1155d7d64a957ed270726c1858e890272a411f85e265915574f4f637c04a96a18f3aef631276e31f2757c9c039897c26af58aefd5029f7bb9706563e4db324de642229137fc78c4a22d4201f943cbbb79a9f6bf0250d7206d3314d3542612813bdec9e63f4d3d4afd53bdc5a93e881a6db22f6bdd312671cf083a4b45889b5b17a1041d6beffdd61e3bb581647a041a34d53cb1b6783ee1b02449b50000000000"], 0x0, 0x0, 0x0}) [ 2024.177918] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 21:51:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)=r2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3ce6ffff0f0043bd00000000000000000000000099c2892d5814484a56237de047f4203c3f3a2454093e38dd8cbd85", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080088a8ffff"], 0x3c}}, 0x0) 21:51:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x14, 0xfa00, {{0x6000000, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r5}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x4, r5, 0x30, 0x1, @in={0x2, 0x4e22, @loopback}}}, 0xa0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8fff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYPTR, @ANYRESDEC=r2]], 0x0, 0x0, 0x0}) syz_init_net_socket$rose(0xb, 0x5, 0x0) 21:51:24 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="55630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e630c4000001f00000000000000000006630440000000001163484000"/100], 0x0, 0x0, 0x0}) [ 2024.281633] binder: 22787:22789 unknown command 1074003970 [ 2024.288907] binder: 22787:22789 ioctl c0306201 200003c0 returned -22 [ 2024.313916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pig=22795 comm=syz-executor.2 21:51:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000100043bd00000000000000000000000069e3b6d4612f49041e6af3998234e816091ddb251c4e1655e8b4e18ad0c2f634baaea4abe5981aa80cba142e2c8c7c234e532cc6beaa48aca3c5bd30cec604f675c1514f20f9bc725dd6b4fb28d904f1a86cc5693e08043dfa93a626cd1d9bc374601017a9ba4cdfd630b1ea9f34c68328dedafd0a3b97b607e9fda60a3ac3bf7c654d2c8b8e2885b2f78fc02b6680a5f029007e7441fbb4188c2dae26840f1c0dc5b664bafdd8c94963ed5867", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080088a8ffff"], 0x3c}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)=""/129) [ 2024.329003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pig=22797 comm=syz-executor.2 21:51:24 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x5, &(0x7f0000000140)={0x5, 0x2}) clock_adjtime(0x2, &(0x7f0000000400)={0xdfd, 0x1000, 0x7fff, 0x2, 0xae, 0x101, 0x10000, 0x1ff, 0x21, 0x400, 0x3, 0x4, 0x5, 0x7, 0xb33, 0x49c, 0x5, 0x9, 0x66f, 0x3ac, 0xba, 0x7, 0x7, 0xa5, 0x4, 0x7}) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000180)=""/175) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8fff) r5 = fcntl$dupfd(r2, 0x0, r1) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @mcast2, 0x5}, 0x1c) r6 = socket$bt_cmtp(0x1f, 0x3, 0x5) write$binfmt_misc(r6, &(0x7f0000000500)={'syz0', "4d594dd5359dc7456fe9e9bf6b054fd581e362ded908e7c6b8060e48c5a47b928dbca1721903811b6af0453e1db55608879b714876ae8c67a44fb221120181fe"}, 0x44) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) [ 2024.375358] binder: 22788:22799 unknown command 536871104 [ 2024.382237] binder: 22788:22799 ioctl c0306201 20000080 returned -22 21:51:24 executing program 1: r0 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x323) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8fff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r4, 0x0, 0x8}, 0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r4, 0x800, 0x800}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000300)={r4, 0x0, 0x3f, "0286cee2ab1d946ee10ad2b66ff62f386551daefb908f073b76b53ea4e4e31e98f00bfe7d875ac88ce6e60824ce0aaf5e6684e7a67af98291a4547fe69e822"}, 0x47) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r4, 0xff}, 0x8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = semget$private(0x0, 0x2000000010a, 0x0) semop(r7, &(0x7f0000000180)=[{0x2f1e4b4c41fb572a, 0x6, 0x1000}, {0x4, 0x4}, {0x2, 0x1}, {0x2, 0x7, 0x67b2dafe68a06724}, {0x4, 0x2}, {0x0, 0x8, 0x1000}, {0x0, 0x4, 0x3c00}, {0x4, 0x1000, 0x1400}, {0x1, 0x7, 0x400}, {0x4}], 0x8d) semop(r7, &(0x7f0000000000)=[{0x3}, {0x0, 0xfffd}], 0x2) semtimedop(r7, &(0x7f0000000040)=[{0x0, 0x20}], 0x1, 0x0) r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304401697eba0a158158f29a070d3d73696f077495264463baff7208a4addbd58a3285d5b57b5b6caffff4647bc"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000000c0)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) [ 2024.477617] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2024.494602] binder: 22800:22804 unknown command 1074029397 [ 2024.506729] binder: 22800:22804 ioctl c0306201 20000200 returned -22 21:51:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000040)={@loopback, @empty}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:25 executing program 4: openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="053cbc17f504061bd839ead52d46138c8d00"], 0x0, 0x0, 0x0}) 21:51:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0xc0482, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000002500070500000000000000001a0000a6", @ANYRES32=r6, @ANYBLOB="0000ffff0000ffff000000000cb40100677265640000000004000200"], 0x34}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000100)={@ipv4={[], [], @loopback}, r6}, 0x14) 21:51:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x9, 0x58, 0x2, 0x0, 0x0, [{{r1}, 0x3}, {{r0}, 0x7fffffff}]}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x2c7, 0x0, &(0x7f0000001740)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x1c, 0x0, &(0x7f0000000040)=[@acquire={0x40046305, 0x1}, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) 21:51:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @local}, 0xfffffffffffffd49) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000040)) 21:51:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e848c631a2f93e8cf746090a0a007d9630c40000000000000000000000baeaad8717a00"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:25 executing program 5: socketpair$unix(0x1, 0xec8208ac988a7080, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@local, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8fff) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000040)={0x87, @dev={0xac, 0x14, 0x14, 0x23}, 0x4e22, 0x2, 'sed\x00', 0x24, 0xffff7fff, 0x22}, 0x2c) [ 2024.949445] binder: 22832:22835 unknown command 398212101 [ 2024.956068] binder: 22832:22835 ioctl c0306201 20000200 returned -22 [ 2024.980851] binder: 22832:22838 unknown command 398212101 [ 2024.990852] binder: 22832:22838 ioctl c0306201 20000200 returned -22 21:51:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)={0x7b, 0x0, [0x4, 0xaad, 0x2, 0x100000001]}) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x40010, 0xffffffffffffffff, 0x4) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x20, 0x9, 0x4, 0x20, 0x4, {}, {0x5, 0x8, 0x2, 0x1f, 0xd5, 0x8, "4e80f6c8"}, 0xb5, 0x4, @fd, 0x800, 0x0, 0xffffffffffffffff}) statx(r2, &(0x7f00000000c0)='./file0\x00', 0x800, 0xfff, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05044003"], 0x0, 0x0, 0x0}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000280)) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') 21:51:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x80400, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x100, 0x80, 0x6, 0x4e}, {0x4, 0x5, 0x6, 0x3}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) [ 2025.025804] binder: 22840:22841 unknown command 1670153230 [ 2025.033913] binder: 22840:22841 ioctl c0306201 200003c0 returned -22 [ 2025.104714] binder: 22846:22848 unknown command 54526981 [ 2025.113629] binder: 22846:22848 ioctl c0306201 20000200 returned -22 [ 2025.142259] binder: 22849:22850 unknown command 0 [ 2025.147282] binder: 22849:22850 ioctl c0306201 200003c0 returned -22 21:51:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0x9) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8fff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x4000, 0x0) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r9 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0x323) r10 = open(&(0x7f0000000240)='./bus\x00', 0x240400, 0x3) sendfile(r9, r10, 0x0, 0x8fff) ioctl$EVIOCRMFF(r10, 0x40044581, &(0x7f0000000380)=0x93f) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r11, 0x0, 0x8}, 0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r11, 0x800, 0x800}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000300)={r11, 0x0, 0x3f, "0286cee2ab1d946ee10ad2b66ff62f386551daefb908f073b76b53ea4e4e31e98f00bfe7d875ac88ce6e60824ce0aaf5e6684e7a67af98291a4547fe69e822"}, 0x47) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={r11, 0x7, 0x20}, &(0x7f0000000080)=0xc) 21:51:25 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x800, &(0x7f0000000100)=0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x8000, 0xcea, 0x20, 0x80, 0x1, 0x7, 0xee}, 0xc) r2 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000280)="04", 0x1}]) 21:51:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x100000, 0x0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000200)="63c40507705bd846b679a3355111ab43212b436e345370de9940179b02b84091a4b3c496c60dfaaef31835e6d44155977d9ebf6100bb2c61f060b9604ad08708071689046b3e91cb0828f0d754789dcb0372700854cc128690fcdaad4518cf479ed456e2", 0x64) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000002000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c0001006272696401000000000000006392f94d6e42ccf3fadae87ffe81a9ff9d12e2f1004960c7e00c5faaab0500000079da1c"], 0x3c}}, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) prctl$PR_SET_DUMPABLE(0x4, 0x1) 21:51:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06634440"], 0x0, 0x0, 0x0}) 21:51:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) sendfile(r1, r2, 0x0, 0x8fff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x28, 0x0, &(0x7f0000000040)=[@acquire_done={0x40106309, 0x2}, @dead_binder_done, @decrefs], 0xab, 0x0, &(0x7f0000000080)="a0b4e6dfe41eba27abce4a0bed086591722d9384799f695176dc352999221539c907310a2a87c7017fed4bc4da7135d285b1aa8bd4699627a3cbb2f86798bf4240afa10cbfebc105ec7007a290831b2985af88781ba962856a72690ebab4a5049c64dc525eb6a7839fb888915330bed9446663f541bc631687ab7659faf73b2fb28d80ac31ccb486682ef28ac09dc6e5772053180ba2c657a4243603bd91117c6dbab3c16468a294ab9c82"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 21:51:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) [ 2025.468489] binder: 22864:22870 unknown command 1078223622 [ 2025.483707] binder: 22864:22870 ioctl c0306201 20000080 returned -22 21:51:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000400)={"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"}) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f6afa9a05e02"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e5e578cbc9237848809cc442ab3afe0d1a3611b3e090000cfe2f6e44c00be91ae572ebc916c894a5a49cc19769b0000000000005be50c182c5f32fcdf7d11b2e0f4c51d137474c4624ffbc66c10884cac6907a90b46573471cc4d3761ea50f8f98aaac2fcffb4fcd119c0604f43f3edab7b640ee8e7ce1fae3f25d430bd56679e1a340180c493dba083fdcda06cfd11c40f1ab56c6fad3cbd8aa7394800000000004e5b78c563d68a6895a59612b57549da18720d358636f1d1fdde3067d0c11503bc007a83cc59a294a26e811eae6baa4f2e195e3e42fbefebf86827388c1aac00"/241], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ec63044068f54f94fead5d7e883f2ce4c2cade562ae059bdb8c6b7b88d93dfbaad4d0b3aff65a79a6232171f4c2dd40ea045f89624719ac63413dbb8495cbfa49be9bfa48a777784e15472b8a9697e379fdebcd36134ddfa4f80252b491b7683b600df9739434b0707070bd23ba476a0c6ed46e77d65ba3cec05c4376f288ad655c6a1f45589364f194f"], 0x0, 0x0, 0x0}) 21:51:25 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x323) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8fff) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x27e, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 21:51:25 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000280)="04", 0x1}]) [ 2025.826261] binder: 22889:22894 unknown command 1074029548 [ 2025.835025] binder: 22889:22894 ioctl c0306201 20000200 returned -22 [ 2025.847100] binder: 22887:22895 unknown command -1940431346 [ 2025.852935] binder: 22896:22897 ioctl 4400ae8f 20000400 returned -22 [ 2025.854164] binder: 22896:22897 unknown command -1599492106 [ 2025.860189] binder: 22887:22895 ioctl c0306201 200003c0 returned -22 21:51:26 executing program 4: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x400) r0 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x323) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x1b) sendfile(r0, r1, 0x0, 0x8fff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffeb5, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16], 0xfffffffffffffe44, 0x0, 0x0}) [ 2025.866172] binder: 22896:22897 ioctl c0306201 20000200 returned -22 [ 2025.891223] binder: 22896:22897 ioctl 4400ae8f 20000400 returned -22 21:51:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0xc00) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="d2d4f943610a0f"], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x20000000) r3 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_mount_image$cifs(&(0x7f0000000180)='cifs\x00', &(0x7f00000001c0)='./file0\x00', 0x20c2fb74, 0x5, &(0x7f0000001700)=[{&(0x7f0000000380)="eb675020c0f1c4fb060a670920d24283a4dd6762e0b5514e2f7e7ee98b158c2d26de20304973c28c41deca0ac0184f1a8b5a0f79806f606f724bfd1b8ca46a95fc60b7f5e95ab24215b6718bcb0dff7f2682dd87b66ac5f60e161876273403f225b70b64add1d87d8d757bb01c0f4781fd4545d051bf7100983627dcb11322b86ecec946467e2adec8bb7460b722c96b2a0415d41d442e901fcf1d2300c2f92fbd4ceef23ff6fb3dfa6deaf64b3576821141759e03d575b4a4203a47eb91dc526ccfe5f495a6d3ba4481d490ab876d0757f799789df7338d4a86a455e470450e72", 0xe1, 0x3}, {&(0x7f0000000480)="ecca29b2c7b24d6f90b34dc26118bb312149537e55bec0a1c5561af5a774e1f286b599871d240e22de56c6b4e7a239a4538d091fc1a45779c4b8bf61cad255748388282d99562beea6c1f12af618e02d59c0dc4fd17968d65847bc4c32b82a3d13a13ca28ae2130c8a75597223770f66f4ee19e8a83c429c152d4810fb125fe2a60eee706a6410c01e5fd6477fe366ed9cceed41638445a7e29d0f320a7858f60c5a73f2dafa83", 0xa7, 0x4}, {&(0x7f0000000540)="c2c2022bb1cadbdfc45a2c3e9abfc9a1c07b35e6075a418bb3987a352655f0eeb6e4293100a3f780b3b25bec1ccbf344baccb4b54b4879f50acd9fc23c5fd2af4808ba7c4f04650612ef0fd63afa873a2523ee1af6fb008e62f9da4cc88f538d86e736342c2a2a3fe52a36c26e31cf98afcfef25daead3c7e5358c6a394184e8b31967eb987062500a3120ea3b0f58516f3622ee91cf1d9057e876dcde60d604a1ea4f279c37fabe647f3a57e79525ec6389510d047b52dea015ef10f582192cccf42c73c4ddfb0ec4fe74db951964e77315705bf839bb", 0xd7, 0xb23d}, {&(0x7f0000000640)="6124f77985f791369f3e9020bb4270a8cc66d8ad59b29ed002f1178fa16ae8cb410a760097458f80406d156d50561ad77973b77dd7da5eeadd0ac651298f98cf924e5c2f8e447ed94f8599d326c86c4459a5e11db23e01b0f7a1bd6e8a64445303db92fc5b9cae789c690882defd8d11c32edc06272e713df424aa583eb6ca45f20b3df6bef9be2046c93e08864fca", 0x8f, 0x3}, {&(0x7f0000000700)="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", 0x1000, 0x8e6}], 0x80000, &(0x7f0000001780)='/dev/binder#\x00') syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x8, @mcast1, 0x5}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e22, 0x81, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e20, 0xffffffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x65}, @in={0x2, 0x4e21, @rand_addr=0x7fff}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e22, 0x3, @mcast1, 0xf152}], 0xc0) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000001b40)) r6 = request_key(&(0x7f00000017c0)='cifs.spnego\x00', &(0x7f0000001800)={'syz', 0x3}, &(0x7f0000001840)='!*\x00', 0xffffffffffffffff) r7 = add_key(&(0x7f0000001880)='id_resolver\x00', &(0x7f00000018c0)={'syz', 0x3}, &(0x7f0000001900)="f77ec3f2cb06c55e1c269594eedd3fb443f89fc715408f4990f9ef0bb19523c8ba6c59193ae91da0e05789b779ad561294fcbbeff60f88fade354b228828bfa45862fd5edade9a83bbb133b3501082cbb41af93c00f5779da76bd39ae445295600169778f5490858b9f66c3cabb6636cc0d2e5749ba2f05f2634c6ea0619fab76f664154b5cb268452799b1560e9dacb7384ff4d4148e67ca4d3816d366a6b0d61a64a3d98303d7509f3a6ef80527cc871bde76b53f8c6e6c5ea87dfeea80396c4d2fc289f63aeefbdca18414832293e1db5e510c27432631457ae9b5460e9f099b018", 0xe3, 0x0) keyctl$dh_compute(0x17, &(0x7f0000001a00)={0x0, r6, r7}, &(0x7f0000001a40)=""/21, 0x15, &(0x7f0000001b00)={&(0x7f0000001a80)={'sha3-512-ce\x00'}, &(0x7f0000001ac0)="d91f51", 0x3}) r8 = open(&(0x7f0000000240)='./bus\x00', 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f0000001c80)) sendfile(r4, r8, 0x0, 0x8fff) r9 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0x323) r10 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x8fff) ioctl$FS_IOC_GETFSLABEL(r10, 0x81009431, &(0x7f0000001b80)) ioctl$KDGKBMETA(r8, 0x4b62, &(0x7f0000000140)) 21:51:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x101080, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ipx\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e20, @loopback}, 0xc3, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)='ip6erspan0\x00', 0xff, 0x7, 0x401}) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000180), &(0x7f0000000200)=0x4) setsockopt$inet_msfilter(r3, 0x0, 0x15, 0x0, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) 21:51:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100043bd00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080088a8ffffe741fe963f39ef6d5f409e71ee6cba5e1e58ae3fced44fd374f64b6de6e740e06790a87a97fbd2dae81a50dd33e0d64d76583087cbc198a5627242d4fa"], 0x3c}}, 0x0) 21:51:26 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000400)={0x6, 0x118, 0xfa00, {{0x42a60bb4, 0x6, "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", 0x1, 0x3, 0x5, 0x20, 0x5, 0x0, 0x9, 0x1}, r5}}, 0x120) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, [], [{0x7, 0x0, 0x9, 0x0, 0x1, 0x2}, {0x8, 0x9, 0x7, 0x80000000, 0x7, 0x7}], [[]]}) 21:51:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000000c0)={0x3, "8cff2e"}, 0x6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x424060, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xffffffffffffff31, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x0, &(0x7f0000000080)={@empty, @initdev}, &(0x7f00000000c0)=0x8) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="e5847b5d"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x1c, 0x0, &(0x7f0000000240)=[@request_death, @release, @exit_looper], 0x0, 0x0, 0x0}) [ 2026.248237] binder: 22919:22925 unknown command 1140446418 [ 2026.254435] binder: 22919:22925 ioctl c0306201 20000200 returned -22 21:51:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffc000/0x1000)=nil) r1 = open(&(0x7f0000000080)='./file0\x00', 0x20a380, 0x86626cf650b74598) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000140)="56cb464f184b03a7473780b26782cb14e9eee6f6f1380fb6fb2304ebf9f6ceadb48a8548f1fe6900d0e362b7736f0a5b902082a91dbf36e5decd926158722b8037a2e449d955512cd522f20fddb8d1517d01a10bd22e3408788ce378a3ed50d9d5824fd1060001ce32152509917c0c68e2b67a8dafc95b5d90b4ed7864670141f5", &(0x7f0000000200)=""/82}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 21:51:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x90a00, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000080)={0x80000000, 0x5, 0x16e}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2026.415110] binder: 22936:22938 unknown command 1568376037 [ 2026.427710] binder: 22936:22938 ioctl c0306201 20000200 returned -22 21:51:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xf, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) [ 2026.547626] could not allocate digest TFM handle sha3-512-ce 21:51:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) clock_gettime(0x0, &(0x7f0000001200)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x80000001, 0x7, 0x4, 0xe000, 0x10000, {r1, r2/1000+10000}, {0x1, 0x2, 0xc1, 0x40, 0x20, 0x1, "154cee3d"}, 0x435b, 0x2, @userptr, 0x9, 0x0, r0}) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000001c0)=0x4, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r5 = semget$private(0x0, 0x2, 0x48) semctl$SEM_STAT(r5, 0x0, 0x12, 0x0) semctl$SEM_INFO(r5, 0x2, 0x13, &(0x7f0000000200)=""/4096) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r4, 0x40044145, &(0x7f0000000080)=0x9) [ 2026.589237] binder: 22952:22955 unknown command 0 [ 2026.604450] binder: 22952:22955 ioctl c0306201 200003c0 returned -22 21:51:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) tee(r1, r0, 0x81, 0x9) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x9) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socket$inet(0x2, 0xa, 0x80) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = gettid() tkill(r2, 0x3c) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x4, 0x4, 0x101, 0x80, r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 21:51:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) syz_mount_image$nfs(&(0x7f0000000140)='nfs\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x2, &(0x7f0000000340)=[{&(0x7f0000000280)="7f7d986b744108245fb820913b928bc56d8c1303876faa4db744aa06482d7ca49ad0e1f76c57bad7cdaf088bf0f8a3f3b09b89730c438094aa6f18b602539ceb75c44768232087efbd07e6bb6319592bae916922a28d66590a8731dcd375ecc49e04f21d64f07adbce8e418ad6ffd3fbd46c429cda8ba60b74758e70cd6649689238b440d1c35c14b824cd293fdc6a26cf8e9c5083", 0x95, 0x8}, {&(0x7f00000001c0)="6403eff8f46ddc8c6ca23b8b375bcd9ed0ac15bb50d5095a988cc569341ac6849023e45c73467b55bd7d3962", 0x2c, 0x8001}], 0x200000, &(0x7f0000000380)=']\x00') vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:27 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000180)="929c34b229b61765155ac9e0cd65ec26b28b7993dc28fc3d5681e5ebdc71ef97c2b6b13e3a436c319eeecd72f1d737b27bebb5ce9921c45317cbf0929138a0b2225b271603365ad360b4538574c2711cefce49659a44847ab8047db7201d8ce4e2db5cefda06b6f4c23fe511e8eb6e7daeb5e3fe35e58249f6d03fc4e8ec97297e031ed9e58e330c23bbdbd32758ee5ce986e7369a0f67895d9d60", 0x9b, 0x400, 0x0, 0x2}]) 21:51:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0x2, &(0x7f0000000040), 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 21:51:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r4, 0x0, 0x8}, 0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r4, 0x800, 0x800}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000300)={r4, 0x0, 0x3f, "0286cee2ab1d946ee10ad2b66ff62f386551daefb908f073b76b53ea4e4e31e98f00bfe7d875ac88ce6e60824ce0aaf5e6684e7a67af98291a4547fe69e822"}, 0x47) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r4, 0x6}, 0x8) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet(0x2, 0x3, 0xa0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000080)={0xa00000, 0x4, 0xfffffffd, r0, 0x0, &(0x7f0000000040)={0x990a75, 0x1, [], @value64=0x9}}) setsockopt$inet_mreq(r7, 0x0, 0x20, &(0x7f00000000c0)={@multicast2, @local}, 0x8) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x15, 0x0, 0x0) 21:51:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1c8) timerfd_gettime(r1, &(0x7f0000000080)) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 21:51:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000000c0)) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x81c402, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000300)={0x17, 0x38, 0x1, 0x13, 0x4, 0x401, 0x1, 0x1a}) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8fff) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000040)={0xb4, 0x20, 0x2, 0x9, 0x0, 0x81}) r4 = getpgid(0xffffffffffffffff) move_pages(r4, 0x14a, &(0x7f0000000100)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f00000002c0)=[0x81, 0x9, 0x9], &(0x7f00000001c0), 0xe) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="056304c0"], 0x0, 0x0, 0x0}) 21:51:27 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc172545e189779be) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x20000) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x7, 0x1, 0x5, 0x7fff}, {0x1ff, 0xff, 0x8, 0x6}, {0x5, 0x20, 0xff, 0x6}, {0x0, 0x9, 0x4b, 0x8}, {0x2, 0x7, 0x74, 0x5}]}, 0x10) r2 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000200)) setrlimit(0x1, &(0x7f0000000140)) r3 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={r0, r3}) io_setup(0x3, &(0x7f0000000080)=0x0) r5 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r4, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000280)="04", 0x1}]) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0xc3f87796131a5016, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000400)={0x0, {}, 0x0, {}, 0x2, 0x6, 0x8, 0x10, "40032535deffa4d4b98ceffb1d037fb0e533b0486b47b688d65ef9bb8a4bf8ef4355b30f4ba306db6bf7e0ff67e63f2da9fd3af95aece258f742c3156a5ff68c", "f60a7b571bf7f05bb006ae39e93630f7da1dfddce3d9a48c63a178fb0aa88527", [0x2, 0x40]}) 21:51:27 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x5, 0xe, 0x4, 0x0, 0x4, {r2, r3/1000+10000}, {0x5, 0x5c72e585903a7a79, 0x1, 0x79, 0x7f, 0x1f, "9d73809a"}, 0x3, 0x2, @planes=&(0x7f0000000040)={0x2, 0x4, @userptr=0x8, 0x9}, 0x5, 0x0, 0xffffffffffffffff}) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000180)) [ 2027.368539] kauditd_printk_skb: 17 callbacks suppressed [ 2027.368555] audit: type=1804 audit(1577137887.501:8953): pid=22991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir447032748/syzkaller.bNKEoG/1622/bus" dev="sda1" ino=16859 res=1 21:51:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100043bd00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000800080088a8ffff0000000000000000000000000000000019e20320668c749eb3c2b6b01f"], 0x3c}}, 0x0) 21:51:27 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0xa, &(0x7f0000000000)={0xfffffffffffffffe}) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) 21:51:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x202200, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x800) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 2027.527301] audit: type=1804 audit(1577137887.661:8954): pid=22997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir447032748/syzkaller.bNKEoG/1622/bus" dev="sda1" ino=16859 res=1 21:51:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) statx(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x0, 0x80, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) statx(r6, &(0x7f0000000380)='./bus\x00', 0x0, 0x200, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000140)='./bus\x00', 0x100000000, 0x7, &(0x7f0000001800)=[{&(0x7f0000000500)="e592fbf9497cda2a646720ef1a11ffe9e4d3d6ce130c54433e61893e05986717061d9272002d46994ad8dbb1d6547f2ed28604f1f02d04c64db7d24af4740bbf6a347c892524f47f2d64fc6f120896f719c928188b79dea5fc88539aa5a516f54dc9b7cb4a878dfa3858603b7f5ef3ea06bcb3e1e09451c05d4d2e4894ee280512031edc709b8b4b21c1677052eabfe683c7768f2fe39567af533e7a120002935cb2d2dcefa9b04e0b9d4bce64586068b5ca407f09922827d1f605c259807c9d2e9afd32e583", 0xc6, 0x45d}, {&(0x7f0000000180)="046c028f236ad11b08a7ecab0f1d22e780a75db23fc127154224", 0x1a, 0xd2}, {&(0x7f0000000600)="975c3a2cedb65be283daf043a3032bc83920f7929bb03522d4dd9bca9311eeb76be31358b859907a38f00a0138e4861278b3227f6414d127bd65467f2aadf8c20cbd8e095fe6e982e597ec471fa46e4111515ec1bab64d5b6fd5d1d9c29e2ac3594ac138ea1116f5659ff0b2929f9f503da5cf4a5777d9c8f5b33a36e4d6511d10916df88417478abb750a61be24fe2e36139fc581db4c66eff2a56aaedb2b49bb6c8a12d21883d49e139bcf65ea15263982e6d1dffd", 0xb6, 0x3}, {&(0x7f00000002c0)="44febb4ddb051bf87d64532d19e7d47872d4dfad4ef429225fa37a951c16e34884b124171d08e185fbdadcfdf385bd3f28f401aab4e1302d34f2b1ed150273a1b375ae7b0daa1ced909293fc5faf7016635690a397c4091f4052", 0x5a, 0xe000000000000}, {&(0x7f00000006c0)="863879fef938e8434ab8e72107fe749855901c9714343dd72a1f6e2b00c15e5e6948fe5fcc1f30e3137ce629fd5cc79f21f4b6f4b2d6920903318091fb1f1452b46b6926a0ec9c9883fc2597bf5499240dd624ec9c5132050f769eda9765766e6349fa1289b80117cd8e1a523d0269c41e3dd807435cf2f96010f538344528ef1e6418661238ae975a64fe65d4e258b56ee0610a403614f2e7a7a993e92f132db1b2608cce6751af8f0a58107e24fbca06d568005350de9fd28c0d", 0xbb, 0x680c}, {&(0x7f0000000780)="8eec0e83451cf64ca38d94b2a8540347634a2fe8b26c41079f84308d4a49e080726cc4ee1895d05386529e25bdf9278adc60f855c01726e0a4d59a35c0ecdb15451542e3c89c468c92afa10af74b7085f577ed8dc90226740004bbbf62379fbb21e8e6484256aba71f109d2b6f13a1f0", 0x70, 0x1}, {&(0x7f0000000800)="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", 0x1000, 0x8000}], 0x0, &(0x7f0000001ac0)={[{@norecovery='norecovery'}, {@noacl='noacl'}, {@extent_cache='extent_cache'}, {@acl='acl'}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@seclabel='seclabel'}, {@fowner_lt={'fowner<', r5}}, {@fowner_gt={'fowner>', r7}}]}) r8 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r8, 0x0, 0x8fff) membarrier(0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x83, @tick=0xfffffff7, 0x20, {0x20, 0xef}, 0x4, 0x2}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r10, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) vmsplice(r10, &(0x7f0000001e80)=[{&(0x7f0000001b80)="70f8645538aecebc300c31aa01", 0xd}, {&(0x7f0000001bc0)="32e895b9c4d2518ae282dd93c1308fa6f1ef16721709ab3e904508ce23903da134cd936d921773aa6ec4358b43110d14b7abeebffb5a2ebed30daf8049883e3f21693e930f5dd56c03ed52360d09107b7f97bdc4fbbefbcc269ed60942a7849fb3a52be653b025d4928929f91217dcdd054ecedb288cf3439ebae8f36f2f99cf8b07c8baf54252d0510eaa16c881b38a24bde1dfeb8b462779507162cf0331ba28400d5aea363980f26c37a9df2e44b3d8fd363af913c5910e9db071c72b525eee0ede8426e8bb2a13e742df0b7b45d0b19b7e7d3e221f6e3f8e40e063b5d338e8ab87f741216b490cd201", 0xeb}, {&(0x7f0000001cc0)="c2ac804d20d7ee38b059068d69beaa776fc4203c974f17072d70c68241fdf0b28665ea436a328e47cdd71e7feca8c351846fe230ae9209ddb2be5ef3f90fc8a4204878ca9826c521101047a3437a8120c9e96bc994779bfe6084990143f26f126e6556fa53a0605d77873e59bd33f0c63e41bcf2372667688209a42e5d30d8dcfe70bc0537e367bc6794e74ebfea1a7c3318e89f606cfc79b0ac03cb8d4ef5e16415c085", 0xa4}, {&(0x7f0000001d80)="3b2d7fa7d13c4bda7224c8db52db9c47091c2061e78f31eb28aa153aecbc49ed4f43fa299de0f70a9750005c542f2b87a70c67c11d9f9a81d12667e38a2aee294be3a7af34b3cce953a8d8dd93f42d46763e71b528efbfa5b6483607a5dbbdd5f4ad99a9088e649e981d0dca11973b7b881370e7cfa5e0dd2333012702b8b6791b6f73d45f1100dffe2c6291d91a084ba38168c38bcdedc8607d60e375f7acaa9515af2b0d147900c1d1ee453798cd27b6cf742bef3a7050f62d39e1cf1ecd2569bb9190caac44d47efda04eecb41873b1e85a0a1ced7f64806d2f31d2654e2f12a6134eacfd80c1167e333d4f73c9fbdb67d6", 0xf3}], 0x4, 0x3) write(r9, &(0x7f0000000340), 0x41395527) ioctl$KDGKBMODE(r9, 0x4b44, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="8fdcc19c12f5a0f0906830dda9fb0500182640f71c0e325b3a8b03cb39f7718331bf30301aef18c1a9117b85d519459c901a7746cc611336a248e5a603915ec2f2b7ee4a96659627c7083058b0a1087afe1671472e59b6e24b827c18091f146ccfeb96f938d2839059bc63cce7838919eb235ec52a68504064db7a2d0eef94a725bec65b18e909016af2557ecbf5071d5a6b5ac57b4f6e6bb63a27ee95d981ec0068cff3529b8d80c92427aef17990befe5806669d370e27e30a863c6a62a99d243884bb7ce347b0e67d20fe8879d757cf4a3c4cba1b11ebbe80e37e311aa75f"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2027.640740] nla_parse: 4 callbacks suppressed [ 2027.641712] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2027.744656] f2fs_msg: 6 callbacks suppressed [ 2027.744667] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2027.774971] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 2027.794646] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2027.802061] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 2027.812054] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2027.819838] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 2027.830653] audit: type=1804 audit(1577137887.971:8955): pid=23021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir509740448/syzkaller.yA8vW3/1181/bus" dev="sda1" ino=16861 res=1 [ 2027.858748] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2027.866242] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock 21:51:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x267, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/relabel\x00', 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x40100, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000001c0)={0xd22, 0x1000, 0x7, 0x6, 0xc, "48e148e3447a6dd550dd7572ed4cd1a6587241"}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f00000000c0)) r3 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x200000) read$FUSE(r3, &(0x7f0000000380), 0x1000) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8fff) fcntl$setlease(r5, 0x400, 0x2) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000200)) r6 = open(&(0x7f0000000280)='./bus\x00', 0x10080, 0x5a45950d8d7ca643) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0x323) r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8fff) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000c000000000400200500000003000000"]) 21:51:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 21:51:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8fff) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x5) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e630c6d00"/16], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) [ 2027.993589] binder: 23008:23021 unknown command -1665016689 [ 2027.999550] binder: 23008:23021 ioctl c0306201 20000200 returned -22 21:51:28 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040885}, 0x80) io_setup(0x3, &(0x7f0000000080)=0x0) r3 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r2, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000280)="04", 0x1}]) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xa00c0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r7, 0x0, 0x8}, 0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r7, 0x800, 0x800}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000300)={r7, 0x0, 0x3f, "0286cee2ab1d946ee10ad2b66ff62f386551daefb908f073b76b53ea4e4e31e98f00bfe7d875ac88ce6e60824ce0aaf5e6684e7a67af98291a4547fe69e822"}, 0x47) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000040)={r7, 0x4}, 0x8) 21:51:28 executing program 5: r0 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x323) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8fff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x3, 0xa0) r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8fff) ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x40084149, &(0x7f0000000080)=0x9a) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x15, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000040)={{0x1, 0x0, @identifier="e88e70d0f105f002022008b23de1ae52"}}) [ 2028.044036] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 21:51:28 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r2 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r1, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000280)="04", 0x1}]) [ 2028.113071] audit: type=1804 audit(1577137888.251:8956): pid=23033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir423096274/syzkaller.0IKwTW/944/bus" dev="sda1" ino=17941 res=1 21:51:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000180)) r4 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0xdc1, 0x2a8000) ioctl$RTC_EPOCH_SET(r4, 0x4008700e, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440d6167e0bf5d6c1082ae02dab268b8827b44687a7796b39e86af09e391ade0c06d7fde10026d129397efc709097c4940bd8dc9ef30bd684b874934c303ff8f95eaf3c5bfd80943a512fb4f6258dc8df4768094fd67792fa6eee179a06c0c3fa1d50e2d6843c9314b106dd6917db0389f08e8ddaea2e5bae2d92991c7e97306b67860d2165358371337f9302f2ecb298db7db7817930fa527df734f66801ac9f3d9fce4262479edb1c0a1bbe1553db56bba548451eff906141060ab31966503f3b229562804ad1"], 0x0, 0x0, 0x0}) [ 2028.179581] audit: type=1804 audit(1577137888.251:8957): pid=23027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2898/bus" dev="sda1" ino=17943 res=1 [ 2028.279966] audit: type=1804 audit(1577137888.311:8958): pid=23034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2898/bus" dev="sda1" ino=17943 res=1 [ 2028.288185] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2028.323200] audit: type=1804 audit(1577137888.381:8959): pid=23042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir593238974/syzkaller.IePVN6/1830/bus" dev="sda1" ino=16856 res=1 [ 2028.364165] audit: type=1804 audit(1577137888.451:8960): pid=23046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2898/bus" dev="sda1" ino=17943 res=1 [ 2028.393811] audit: type=1804 audit(1577137888.461:8961): pid=23044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2898/bus" dev="sda1" ino=17943 res=1 21:51:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = gettid() tkill(r3, 0x3c) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0xbd, 0x0, &(0x7f0000000100)=ANY=[], 0xfffffffffffffeac, 0x0, 0x0}) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8fff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f00000000c0)={0x400, 0x31424752, 0x1ff, 0x80000000, 0x3, @discrete={0x3, 0x9}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) [ 2028.421796] audit: type=1804 audit(1577137888.501:8962): pid=23033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir423096274/syzkaller.0IKwTW/944/bus" dev="sda1" ino=17941 res=1 21:51:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:28 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r1}) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r3 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r2, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000280)="04", 0x1}]) 21:51:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x93872f499065bd43}, 0x20}}, 0x0) 21:51:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x9) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="ba800440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x346, 0x0, &(0x7f0000000240)=[@acquire={0x40046305, 0x1}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x100000, 0x10000}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r4 = dup(r3) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000100)={{0x1, 0x6}, {0x2}, 0x5ce}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x1eb, 0x0, 0x0}) 21:51:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000080)={0x6, "2859f57f9d6e6704476c1e86df73a5c2ff20fc076a7440a8ff08453677fd3938", 0x0, 0x3ff, 0x1, 0x4, 0x1050400, 0x4}) 21:51:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="87b8fe515298f250d0efffb2faebaebfa4b86d201d246e98058a1bd2879a21e273d325fe89471a06806ac852e3c75ae7778fdbfdb8455cce3e5fe29f1309afb4953db0316b5e80cc9762b38c05105303924291041d365bda5082d557738b407a88fbc519"], 0x0, 0x0, 0x0}) 21:51:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000001400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001440)=0x14) sendmsg$nl_route(r2, &(0x7f0000001500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=@ipv4_deladdr={0x20, 0x15, 0x787, 0x70bd2d, 0x25dfdbfb, {0x2, 0x9c, 0x18, 0x36, r3}, [@IFA_BROADCAST={0x8, 0x4, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8162b85e453d2609) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x8) fcntl$setsig(r4, 0xa, 0x30) 21:51:29 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)) r0 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_setup(0x9, &(0x7f0000000400)=0x0) io_getevents(r1, 0x2, 0x2, &(0x7f00000015c0)=[{}, {}], &(0x7f00000000c0)={0x0, 0x989680}) io_setup(0x9, &(0x7f0000000400)=0x0) io_getevents(r2, 0x2, 0x2, &(0x7f00000015c0)=[{}, {}], &(0x7f00000000c0)={0x0, 0x989680}) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000280)="04", 0x1}]) [ 2028.844254] binder: 23078:23083 unknown command 1074036922 [ 2028.863923] binder: 23078:23083 ioctl c0306201 20000200 returned -22 [ 2028.864981] binder: 23076:23084 unknown command 1375647879 21:51:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0) ioctl$TCSETXW(r1, 0x5435, &(0x7f00000000c0)={0x800, 0x8784, [0x8000, 0x7ff, 0x3, 0x3, 0x1], 0x7}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000100)=""/214) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 21:51:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00fad32000000000004000e9ffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080088a8ffff"], 0x3c}}, 0x0) [ 2028.904382] binder: 23076:23084 ioctl c0306201 20000200 returned -22 [ 2028.944309] binder: 23078:23096 ioctl c0306201 200000c0 returned -14 21:51:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8fff) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:29 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0xbfb8f9b79f2d5ad5, &(0x7f0000000140)={0x30}) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x40000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x3, 0x0, 0x6e93, 0x2, 0x400}) r2 = memfd_create(&(0x7f00000000c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000280)="04", 0x1, 0x0, 0x0, 0x2}]) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xbac95915d9b6e7d2}}, 0x5) 21:51:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r3) ioprio_set$pid(0x2, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 21:51:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640)='/dev/zero\x00', 0x204c1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={@flat, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/49, 0x0, 0x2, 0x2b}, @flat=@weak_handle={0x77682a85, 0x1000, 0x2}}, &(0x7f00000003c0)}, 0x440}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={@fda={0x66646185, 0x4, 0x2, 0x7}, @fda={0x66646185, 0x5, 0x2, 0x21}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/251, 0x0, 0x0, 0x12}}, &(0x7f0000000600)}, 0x40}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={@fd={0x66642a85, 0x0, r1}, @fd, @flat=@weak_binder}, &(0x7f0000000700)}, 0xc00}, @request_death={0x400c630e, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x1}, @register_looper, @register_looper, @clear_death={0x400c630f, 0x3}, @enter_looper], 0x91, 0x0, &(0x7f0000000040)="b40f6e76a93a004489a1281d7ccb93bcde813d1de8b93d5111e0a7989daa6f0e7c00aa363ab30ce0a2359a350b0bdaa5458ab6c2f9256864c94d5f98a8ca71d672274937be076ef84aa8427a4868d5cf8b11b2597287d2cebbf95ddce7f7d0dde9cde9f5c6ea963dc593e8cd5f20ba4f29801b071cf2e7fcf74e9f58c4d552836acbf5da8babf866305fa325711ec4b263"}) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 21:51:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000080)={0x20, 0x81}) [ 2029.293466] QAT: Invalid ioctl [ 2029.316098] QAT: Invalid ioctl [ 2029.319464] QAT: Invalid ioctl 21:51:29 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000000040)={0x0, 0x2d, 0x1, @thr={&(0x7f0000000000)="e1d16b0436de8ed9b36b1c86766c14791e8f5b3636fa30508f2ceed3f7a41adb2b5a", &(0x7f0000000180)="758e79188bb799027e4d2964e072556e8e147efdf6d059987787a2dc273626a5c3d7476f120f282be6be75786d37a191211a9a25d12f33541896d139486a10ccbaadafc854b7557eb3dd5cfb14e24f955a07f616c038411a5db85d36f9c9704849b902564ea27724b3495d93edc024fab5607d826a3e54fe2d49b8007bd293b51d4149999384931a7bd514858ca9b94d71cabda72abe6742672a7419f62ffcecbccb5364e3e1962077d5360f5a2e60af38be619c2369a8212e0cbac160b0200b5de9a80cda1cc66943bbd7e27bb763eea109aaf5a2ac7a8a6d8a308ecae68e15c6151e"}}, &(0x7f00000000c0)) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000100), 0x4) r2 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000280)="04", 0x1}]) 21:51:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x25c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2300, 0x8ec85ade27d8e58}}, 0x3c}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x20440, 0x8) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000000c0)=0xe, 0x4) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fcntl$getown(r2, 0x9) 21:51:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000180)={0xf78, 0x3, 0xfffffffffffffff8}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r5, 0x800455d1, &(0x7f0000000080)) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @dev}, 0xb0) setsockopt$inet_msfilter(r3, 0x0, 0x15, 0x0, 0x0) 21:51:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/157, 0x9d}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/138, 0x8a}], 0x3, 0x800000000000007f) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000100)) listen(r1, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8fff) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000040)=0xb8, 0x4) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$KDADDIO(r5, 0x4b34, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:29 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)={0x80000000000}) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8fff) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8fff) io_submit(r0, 0x0, &(0x7f0000000340)) 21:51:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8fff) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x3) r3 = open(&(0x7f0000000340)='./bus\x00', 0x18000, 0x101) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0xe, 0x180c00) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8fff) setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f00000000c0)=0xc7, 0x4) r5 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x28001) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 21:51:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000000c0)=0x1) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100)={0x0, 0x70}, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8fff) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xf5, 0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2, @ANYBLOB="1dd3b2b02ea65ad108c323608c8b3bc7940a166c55213dcef1c34c7df33854956e5ad7e0fd396efa3e4b8a981de41649e7b10004be8aa91651839fe55211ec89086b5b4e7995bbb692b76c87fdd4", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="76d64279e85877346d5fc451807c1c2f476043d52a1999c0c0a3b2accf633ccc2c45e632304e7bb667cf997bd4db01bf6d219f9b29412ecdf6570e538d63", @ANYRES64, @ANYBLOB="490b7ec1ef5d6a12dc0eddb0bc5a665fde51253c9aa0becfcaf2554a2eb7c5ab995d68c44ec99e45ca3d03b979628f116ddb03e4baa5f71fc6ff838b3b85672f56dbf277f05ca2bf4c429549bb6fce1734207c47ee3c4f", @ANYBLOB="9bac270be593a26c949dc5252ca637f5adf428e18d0150ba79543ccbab7f19959dea1858813576", @ANYRESDEC, @ANYBLOB="e8f9e2f979e9897a089577ac121d140997048ccd98f0e9a882e853aed585c6f9c188975e729c941b81ba3a4e154a1d55221b8b08dca97f8a483b038172088213b5cc062d71b399945ac9fbe0e1590f07294b27f25fe8910611d20f32d996b4f696e55a7c83c32bf75762b7c8e1", @ANYPTR, @ANYRES64, @ANYRESDEC=0x0, @ANYPTR], @ANYRESDEC=r3, @ANYRES32=r0, @ANYBLOB="b0c0d9f3621f7314322fbd538c6ddbd0b25424053fcf527a58389afd9aa4c4d9ec27e0ccf2632bbbe68a10c80f0395e2db8676747f496b50b2cfad96696099fe035fe7", @ANYRES32, @ANYRESHEX=r4, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES16=r6]], @ANYRESHEX], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x2f}}, 0x0) 21:51:30 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8fff) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x8000000000) accept(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000140)=0x80) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c76ea5e07f9f74cc0000000000000070c14340dac537edeedbda560244d4ff7fd2ec7af196aad489430", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080088a8ffff"], 0x3c}}, 0x0) [ 2029.923190] binder: 23151:23167 unknown command 808464432 21:51:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="5dc902000fe7b645720989760c40cb78f14342d397eb6149e157c043f2feaaa6ac3c1b27cc11ab395f0011415c392fa5fac05ea48a9504268057659a67a22928238e4d76d43e3f0004"], 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x13}}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004010}, 0x40000) [ 2029.966298] binder: 23151:23167 ioctl c0306201 20000200 returned -22 [ 2030.007862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63751 sclass=netlink_route_socket pig=23174 comm=syz-executor.2 [ 2030.106281] binder: 23176:23177 unknown command 182621 [ 2030.112155] binder: 23176:23177 ioctl c0306201 20000200 returned -22 21:51:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x802) r2 = gettid() tkill(r2, 0x3e) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r4, 0x10, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x100) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r5, &(0x7f00000003c0)=ANY=[], 0x0) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8fff) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = gettid() tkill(r8, 0x3c) r9 = gettid() tkill(r9, 0x3c) r10 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r10, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) r11 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r12 = getpid() sched_setattr(r12, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r13 = syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0xfffffe78, r13, 0x10, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x100) r14 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r14, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r15, 0x407, 0x0) write(r15, &(0x7f0000000340), 0x41395527) r16 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r16, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64=r7, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYRESOCT=r9, @ANYPTR, @ANYBLOB="b80f96cffd52d70ff8f7698f46202baa3a84001627c2923366b03f19b9d68225bd3846be3b37c8995af388fdd033b4fe0123509881a6d997cdc5205d0f384e8a2fa5e5bc9d8215c34117bb60ca15d7a6ad5d20cfdb5e58db0ae64f844d81977e66909c89260654ae21a2d2f07e00a85956b2164634f9b366d04ae596d8c0c2e29f9c591428c925003db778486001932ad8f9e91db764d4b59a7bb0ccb06ad143c080c582b48787967491875d6670a30999c39d9d4dac19d19bc492b841b1d80725f67c0c1701409ad1b1ac98754689467321f52410ad5bd4611d45", @ANYPTR64, @ANYRES64=r10, @ANYRESDEC=r11, @ANYRESHEX=r12, @ANYRES64], @ANYRESOCT=r13, @ANYRESHEX, @ANYRESDEC=r14, @ANYRES32, @ANYRES64=r15, @ANYPTR=&(0x7f0000000500)=ANY=[@ANYRESOCT, @ANYRESDEC=r16, @ANYRES16, @ANYRES32, @ANYBLOB="344298d7071c71dbe512b44b47575df92600000000de61c1201866ead895bab2b0ab93ffc94224003e70d07a11666e1682b6912c1cf06ea7458bb7210cbdcb4cf95241a0f887c0d68ca8c2f5e833829bff3443c23c140b8cfc8b4e8ff7beecf4adaab343e1d2496438a22e6dcb3f8ffca86216ec09dd227ff33c9368a3ef8ead65771b1e6faea70ec45094b6d4c8d18f19401d5f1552c2776d6a1699cecfb96f1ee205b888fa7d692894d68ba197", @ANYRES16, @ANYRES16, @ANYRESDEC, @ANYPTR64], @ANYRES64], @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRESDEC=r4, @ANYBLOB="6b8885bc331dcb4f675056d0bafdc176d2cc65fb0b16c83b59b045b35645a0ffc787312607dd3fb90d93597dd39f9725be5e3cadf9f96da74598d3325717ea48ff9d5d856ee4244a20c9851e2f13b2c90bf2d769b3d8615ef666804afb71edad98a5775549e6055e3df5164c51925240e538673d8615481af56d312074f8f2c068e0baf1bbaa4a5aa7a8d7d9d9215566ef455193ddff07b778a9bc3ef188ff8e"], @ANYRES16=r0, @ANYRESOCT, @ANYRES16=r5, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32], @ANYRESHEX=r1]], 0x0, 0x0, 0x0}) 21:51:30 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x191c00, 0x70818a43c844f49c) syz_open_pts(r0, 0x668a80) rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x88500, 0x0) memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x5f1ddbd0996bfcdc, r1) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8fff) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x5, r3}) fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0x323) r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8fff) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f000002f000/0x18000)=nil, 0x0, 0x0, 0xa, 0x0, 0xfffffffffffffed4) r8 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) write$selinux_access(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x4c) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000180)={0x2, 0xc81, {r9}, {0xee00}, 0x2, 0x44ff}) r10 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) r11 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="6f73dea9f0fe9880972e6c6d2d6d6f6e69746f7200eaeb0b10b373650c7f4ff4d4b8d4541ec0c6d8b2e2cbb65e48a973f6cf"], &(0x7f00000006c0)=""/236, 0xec) ioctl$EVIOCGPHYS(r11, 0x80404507, &(0x7f0000000400)=""/188) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000300)=0xc) write$binfmt_misc(r10, &(0x7f0000000000)=ANY=[], 0x323) r12 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r10, r12, 0x0, 0x8fff) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 21:51:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x9c0000, 0x0, 0x10001, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x9909d3, 0x1f, [], @p_u16=&(0x7f00000000c0)=0x5}}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f00000001c0)={0x3, 0x3ff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000080)={'bpq0\x00', {0x2, 0x4e24, @remote}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000000000000000000000e61d9f505240285b", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080088a8ffff"], 0x3c}}, 0x0) 21:51:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x400, 0x0) ioctl$SIOCRSACCEPT(r1, 0x89e3) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000a40)={0x14, r5, 0x401}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x40c, r5, 0x69946d74804a11b8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x11c, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3f, @ipv4={[], [], @local}, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'ifb0\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xffffffe0, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}]}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x69}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xdf0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3389}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xd8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bpq0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff0001}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfff, @loopback, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, [], 0x29}, 0xd6}}}}]}, @TIPC_NLA_LINK={0xfc, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x87f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdfea}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x40c}, 0x1, 0x0, 0x0, 0x4040004}, 0x8) [ 2030.434299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23197 comm=syz-executor.2 21:51:30 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000)={0x1}, &(0x7f00000000c0), &(0x7f0000000040), 0x8) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) read(r2, &(0x7f0000000400)=""/4096, 0x1000) io_submit(r0, 0x2000000000000302, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1, 0x2}]) 21:51:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000100)=0xfff, 0xb4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) recvmsg(r2, &(0x7f0000000040)={&(0x7f00000001c0)=@nl=@proc, 0x675, 0x0}, 0x12022) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000040)={0x1}, &(0x7f0000000080), &(0x7f0000000180)={r4, r5+30000000}, 0x8) 21:51:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x800, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = fcntl$getown(r0, 0x9) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x1, 0x1, 0x1000, 0x8, r3}) 21:51:30 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f0000000000)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8fff) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000180)=0x4) sendfile(r2, r3, 0x0, 0x8fff) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x4, 0x7f, 0x6, 0xa3}, {0x1, 0x6, 0x2}, {0x5, 0x80, 0x40, 0x2}, {0xfffe, 0x1f, 0x9, 0x8}, {0x4, 0xaa, 0x81, 0x100}]}) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) 21:51:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0xff6479d0216159e6) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x12, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x200288) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e630c400000000088000000066304400000000011634840000000000000000000000000000000000000000000000000000000000000000000004000000000000000d10d00"/96], 0x0, 0x0, 0x0}) 21:51:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x8001, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8fff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r7, 0x0, 0x8}, 0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r7, 0x800, 0x800}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000300)={r7, 0x0, 0x3f, "0286cee2ab1d946ee10ad2b66ff62f386551daefb908f073b76b53ea4e4e31e98f00bfe7d875ac88ce6e60824ce0aaf5e6684e7a67af98291a4547fe69e822"}, 0x47) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={r7, 0x1f}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)={r8, 0x2}, &(0x7f00000001c0)=0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:30 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="68cb04", 0xa9}]) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x80000000, 0x183d43c9cec749c8) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000040)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000180)=@generic={0x3, 0x7226fbd9, 0x3ff}) fcntl$setpipe(r3, 0x407, 0x0) r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8fff) ioctl$BLKROSET(r6, 0x125d, &(0x7f0000000240)=0x408) write(r3, &(0x7f0000000340), 0x41395527) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f00000000c0)={0x1c6, 0xe, &(0x7f0000000400)="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"}) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f00000001c0)=0x3) [ 2030.844614] binder: 23229:23230 unknown command 1717991472 [ 2030.852201] binder: 23229:23230 ioctl c0306201 20000200 returned -22 21:51:31 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x6) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000000)) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) [ 2030.926087] binder: 23229:23235 unknown command 0 [ 2030.935297] binder: 23229:23235 ioctl c0306201 200003c0 returned -22 21:51:31 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001140)=""/165, 0xa5}, {&(0x7f0000001200)=""/219, 0xdb}, {&(0x7f0000001300)=""/30, 0x1e}, {&(0x7f0000001340)=""/128, 0x80}, {&(0x7f00000013c0)=""/182, 0xb6}, {&(0x7f0000001480)=""/26, 0x1a}, {&(0x7f00000014c0)=""/231, 0xe7}, {&(0x7f00000015c0)=""/118, 0x76}, {&(0x7f0000001640)}, {&(0x7f0000001680)=""/115, 0x73}], 0xa, &(0x7f00000017c0)=""/154, 0x9a}, 0x40) bind$vsock_stream(r0, &(0x7f00000018c0)={0x28, 0x0, 0x0, @hyper}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001a00000125bd7000fdc4561254000050"], 0x14}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) read$FUSE(r2, &(0x7f0000000140), 0x1000) 21:51:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000080)=""/6) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000040), 0x2) r4 = socket$inet_sctp(0x2, 0xe, 0x84) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f00000000c0)={0x1, 0x1}) ftruncate(r4, 0x5) 21:51:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/60, 0x3c, 0x8, 0x2, 0xb, 0x100, 0xffff0000}}, 0x120) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000080)={0x1f, 0x0, [], {0x0, @reserved}}) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) getitimer(0xe1fc11cc8305d65c, &(0x7f0000000180)) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x4, 0x3, 0x4, 0x70000, 0x68, {r1, r2/1000+10000}, {0x5, 0x8, 0x18, 0x6, 0x0, 0x5, "68b4dbff"}, 0x9, 0x0, @fd=r3, 0x1ff, 0x0, r0}) read$eventfd(r4, &(0x7f0000000100), 0x8) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r8, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x820084}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="200027bd7000ffdbdf000200"/26], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r7, 0xc06855c8, &(0x7f0000000340)={0x3, 0x8, {0x57, 0x5, 0x0, {0x2, 0x7fff}, {0x6, 0x7}, @ramp={0x0, 0x7, {0x7fff, 0x5, 0x5, 0x2}}}, {0x53, 0xff, 0x8, {0x7ff, 0x7f}, {0x1, 0x7}, @period={0xb4, 0x1f, 0x3ff, 0x4c93, 0x40, {0x1, 0x6004, 0x0, 0xffff}, 0x5, &(0x7f0000000300)=[0x4, 0x6, 0xf0, 0x1, 0x8001]}}}) setsockopt$inet_mreqn(r10, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x15, 0x0, 0x0) [ 2031.513060] QAT: Invalid ioctl [ 2031.519887] QAT: Invalid ioctl 21:51:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000000c0)=[@increfs_done], 0x13b, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000400)={0x2, 0x1, 0x6, 0x1, 0x7, [{0x101, 0x0, 0x200, [], 0x2}, {0x7, 0x80000000, 0x2, [], 0x8}, {0x33b, 0x8, 0x80000001, [], 0x282}, {0x0, 0x63bf, 0x1, [], 0x200}, {0xd3, 0x1, 0x0, [], 0x709}, {0x31b0, 0x80000001, 0x7, [], 0x8}, {0x3, 0x8, 0x100000001, [], 0x200}]}) 21:51:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e630c4000000000000000000000000006630440000000001163484000"/87], 0x0, 0x0, 0x0}) 21:51:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffed7, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)) r3 = msgget$private(0x0, 0x42f) msgctl$MSG_STAT(r3, 0xb, &(0x7f00000000c0)=""/10) unshare(0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r3, 0x0, 0x8}, 0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={r3, 0x1, 0xf801}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r3, 0x800, 0x800}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000300)={r3, 0x0, 0x3f, "0286cee2ab1d946ee10ad2b66ff62f386551daefb908f073b76b53ea4e4e31e98f00bfe7d875ac88ce6e60824ce0aaf5e6684e7a67af98291a4547fe69e822"}, 0x47) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={r3, 0x5}, &(0x7f0000000080)=0x8) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) clone(0x10000400, &(0x7f0000000400)="02881c6df86f702ea9ce71ae7503f7bec30603ed02cda7115e8e3453fdfde2bfbb5ec7a8be2b702025d98de9bc809840f3f504f0fe7bf25852660c22e454a072ac9c2ae068ef858eb2f9a9e6ba7fcd76db900820c0a9368e8b2a70742c476f60a2e5238ec7d8050ddf1b04ff087d83821b7f4cf3d088e31c35b6948001c3ab1e50bcb14fa45f53120efd9b3d2a8eaec3203955b071cfefdb654a2ea0414ff7099222ae3293a837399fe475b81f69a3fda00fe8e2b0", &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000004c0)="d2945afc510d0831c8f0e7a352abc500276dd92fd7c171782c795f5be58e61d0afe1f57b862d4753be6bdbf8ee0e2d81b190cea3cde8fb2a0b1257fe84c951a27f2c46704dcede00de856ca9021d120380e00e3a55df2c5a857b36323846fa681b2ebeeeed9c28bed8f74a8bf8e750f011dd618f4576468340228eb1a6a78ad65c4868c06845b0ff894e5234853f45a739b271098e3f6be58564cb34ebb83dd0325abd34820722c586b78174a2e8b76c2cffb4e5d3aafe49c042c39a") vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) 21:51:32 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0xc5cfae2a2d7ceb67, &(0x7f0000000000)={0x0, 0x1}) io_setup(0x3, &(0x7f0000000080)=0x0) msgget$private(0x0, 0x200) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) write$FUSE_GETXATTR(r2, &(0x7f0000000040)={0x18, 0x0, 0x6, {0x7}}, 0x18) 21:51:32 executing program 2: r0 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0xfffffffffffffffe, 0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x4, 0xff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8fff) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x3e}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 21:51:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 21:51:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) bind$nfc_llcp(r1, &(0x7f0000000380)={0x27, 0x0, 0x1, 0x7, 0xfb, 0xe, "c4d66262a4ce6428d7a84fb9dbf105aa7e33ec96b2d05a764cc68fb313db48076c841ce57ddbef744739d4b235da1dda63f86a7aff3899555f4ae9d7321600", 0x16}, 0x60) write(r2, &(0x7f0000000340), 0x41395527) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r4, 0x0, 0x8}, 0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r4, 0x800, 0x800}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000300)={r4, 0x0, 0x3f, "0286cee2ab1d946ee10ad2b66ff62f386551daefb908f073b76b53ea4e4e31e98f00bfe7d875ac88ce6e60824ce0aaf5e6684e7a67af98291a4547fe69e822"}, 0x47) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r4, 0x9}, 0x8) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) r8 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='g', 0x524, 0xfffffffffffffffb) keyctl$revoke(0x3, r8) r9 = add_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="208336f9072b8e2d2097d3e03eb248b5e6a0cfa612187907dcf1575ef5695eb0bbfc19a8207e4f720379597b50ca5cd687e9940f4ea65d2c5d2273be2b6f977dcb3ae0808d3f895455130540d89648a466215de683676de301ae35481b454a6d472c98244769dbb2e36934686007891c8bba86c6759fab81cb83028d845f03823ec6ac9706e2cd0aeaf882a5e95942d7746c02c067582722322f2aa8fcd5e898de60ee4fcba4172bf95098af5bcb8848a14c6179a28aeba7bc93fb818ef4ec69db5f5dd6b1e49703af1048f5b7ac11b69a0fb3b46bf47006fa081095be24154013c989774dddff563f0e6fc112d93b2c5c6e", 0xf2, r8) keyctl$read(0xb, r9, &(0x7f00000000c0)=""/17, 0x11) setsockopt$inet_msfilter(r6, 0x0, 0x15, 0x0, 0x0) 21:51:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x3cb, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xfffffca0, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/71, 0x0, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x3, 0x1, 0x33}}, &(0x7f0000000280)}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) [ 2032.488419] binder: 23311:23312 unknown command 0 [ 2032.494309] binder: 23311:23312 ioctl c0306201 200003c0 returned -22 21:51:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x54b800, 0x0) sendfile(r2, r3, 0x0, 0x8fff) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x24000, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000400)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:32 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) write(r3, &(0x7f0000000180)="c2a098fa2d7c7225959badb5e0cf4e6a6cf40871bc7aeec3516d51be6c9581384187221a0b22ad743859cf0e9c7ae8f7555035865e0e936bab62a08ae3a33599fd47fd2fb3a3acfaf3c3b78f7d4bcffa56b1f03b152d0c120284e3d21d6300299077997dd13e86269d6d27c0e2ad025e0237018a97bf6e03ca9cd5ec04b6aa6546b9141ebc1a1bee26afa0f771cd2e74089db518c8bb87d5c6bc40ee6b82cf2a78227aaf558827a47a82", 0xaa) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'hsr0\x00', 0x3}) r4 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000280)="04", 0x1}]) 21:51:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000040)={{0x2, 0x0, @descriptor="b262cd35f868f1d1"}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x1d0, 0x0, &(0x7f0000000140)=[@request_death, @release={0x40046306, 0xfffffffd}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2e8, 0x2c8, 0x0, 0x0}, 0x400}], 0xffffffffffffffa0, 0x0, 0x0}) 21:51:33 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x80000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x5, 0x5}, 0x0, 0x0, &(0x7f0000000280)={0x5, 0xe, 0x0, 0x7fff}, &(0x7f00000002c0)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x7ff}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={r0}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = accept4(r1, &(0x7f0000000080)=@in, &(0x7f0000000140)=0x80, 0x80000) fsetxattr$security_evm(r2, &(0x7f0000000200)='security.evm\x00', &(0x7f00000001c0)=@v1={0x2, "e0adf2e7f151aa1755b6999e"}, 0xfffffe64, 0x6) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 21:51:33 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000040)) 21:51:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000100043bd000000000000000000000000d3c62d32f2896db501de51eca9cd6af44048442696981d04936b68f754f9b2792ad020dbb4610d8e10c59fe061e197ce3cf78c8399dc979385bfcf50eaa8ecfb3f6433da45dfdf630f6fec96c6d014336b87c5b7487def902a6771513ac4d2afbd596934102f41c5b95e44aa", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080088a8ffff"], 0x3c}}, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000080)={{0x20, 0x0, 0x2, 0x4, 0x9}, 0x0, 0x757e, 0x9, 0x8, 0xfff8, "34908c79e5ddb6149721b9c0162e0368dbc52924cbc73b20cae7fb62f1dee003d3fc9166c68a9a2208d8fb1af5e7055ab020d1ce76939e01d9be928ba8145a1ff638b723aab4a9862755e0ac81a3c0622ff0f4d4cf658d6a49410e1a878958a8eb70c05051957e7ba00e9a34be8e4b1c175f8970d74cf0e0a836a91c32644bcb"}) [ 2033.025347] binder: 23339:23348 ioctl c0306201 200003c0 returned -14 [ 2033.062521] binder: 23349:23351 unknown command 0 [ 2033.067544] binder: 23349:23351 ioctl c0306201 20000200 returned -22 21:51:33 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) close(r3) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) sendfile(r5, r4, 0x0, 0x8fff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x0, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05670442"], 0x0, 0x0, 0x0}) [ 2033.094637] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2033.105891] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2033.234718] kauditd_printk_skb: 34 callbacks suppressed [ 2033.234727] audit: type=1804 audit(1577137893.371:8997): pid=23364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir447032748/syzkaller.bNKEoG/1637/bus" dev="sda1" ino=16898 res=1 21:51:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) memfd_create(&(0x7f0000000040)='system,selinux\\self\x00', 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100043bd00"/20, @ANYRES32=0x0, @ANYRES32], 0x3}}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x10000, 0x10000) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) [ 2033.282380] binder: 23360:23364 unknown command 1107584773 [ 2033.288066] binder: 23360:23364 ioctl c0306201 20000200 returned -22 21:51:33 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x183}]) 21:51:33 executing program 2: ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000080)={0xb, 0x1}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100043bd00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964677b00000c008104932bc4905577ffff68afedc9f2d9ee8fa0b4ef0b64b626025bea77b9e7842b385a9ed63bf7f51a1888c9d3b9a6f3b9e6f9f3956322ff6c0c6ca753a7d6e667"], 0x3c}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$RTC_PIE_ON(r1, 0x7005) 21:51:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x80000) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000080)) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x983002, 0x0) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000100)={0x9, [0x5, 0x8000, 0x6, 0x3ff, 0x3, 0x6, 0x0, 0x6, 0x3]}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x15, 0x0, 0x0) 21:51:33 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x1) io_submit(r0, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f0000000280)="04", 0x1, 0x8, 0x0, 0x2}]) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 21:51:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0xa, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$audion(&(0x7f0000001380)='/dev/audio#\x00', 0x8, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f00000013c0)=0x1b694de7, &(0x7f0000001400)=0x4) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) pipe(&(0x7f0000000100)) prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x1f, 0x5, 0x46, 0x2, 0x0, 0x0, 0x382d8, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x200, 0x7, @perf_bp={&(0x7f0000000100), 0x5}, 0x5409, 0x9, 0x10001, 0x8, 0x8001, 0xd8, 0x8001}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x1) vmsplice(r7, &(0x7f00000003c0)=[{&(0x7f0000000480)="50fc5a30812664aa116aa1de03e19832aa5ea79a6aeab5418f3471f07ef2fed9ad23e937a766d4d0e568b07c794d2e429d2bf30e76b73ea619c2c757d54a86a35db3367a49b4897fca78480b66f8287fbe8b7d72e2a99e970f75788020c8121ce0bd2a373f351545cf4596afafd038d613f62c0ecd04fdb9dd20d10f27ad306f1fff8d44e39f5e17e70e29e332bbcdcb56cc39a064a2567a5e6aa9a1ac384f7e6373910734e97ce02975305bb75065bf2d6bb2e9d77f872a4a92ae63b54f8270233fc31a22eda23c8ba67f65415ca85148545a9eef830a492606eb3fb475c0754d4a83", 0xe3}, {&(0x7f0000000300)="91fd2a9c77c3ec0a08081d5399451a72521c7c7c4870de52929426446ec8aae41877be4c98a080b8c12164e42c6c3862fd6a98e87a0fd18ed0d3ba166f124e599c6317ac866d71", 0x47}, {&(0x7f0000000880)="478611df3a0a27b5f1775dc2594863f00356f1cfd264b1a659540c6e87ae8dd2a72c02c7724b14ac5ca498be1a2f380650fdecb8e9fa1bfc38bb9aa0a92490f2dda7aa5783f3e10cc2d9b787eee5baf4017ccdcca76e8657c8bc3c0f7e459bc95e001cf3f6263ccb8c8fff53ff1e6fc865578bd3642acd6094bcb03b74ca8292f7fcfb025c8ad0d53dba7a2e6a5aad266065ff42fa200486a86e791b1889c78933859b04c8d3e05e82ff26b5ff67a271b91e5d106d467f5a35", 0xb9}, {&(0x7f0000000940)="d5d13daa95d9a969e30a7193c4d43269c7442fddca4a77b668fb6e9fab5f383c32c04d18e7f5b2d652a891cbc30974a61f2e070b86f472398818d63c0805073b2e7764d96b553970cb9a4648b45b9241fbf0c7b2a9e702e14a602d49a8cd353514075b3341498adbb55ab02a3f92ddcf025d83edd7f52617fd839ca0b361e365f89857a29f3baa31a9ab1992a8fe3e15c6de51bd57c3c775725530d51c285820f48b4483e5159f1a9013115905e8f87d947a65a87fa50644d59b654b289d2e54e3c96e7d02c1dcd60d3cd10487e7634f22333a3772d09f1bd3692affa331c01c8c74cc47f7d9e1a7797da1c948f8e689c0c97ea3", 0xf4}, {&(0x7f0000000a40)="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", 0x800}, {&(0x7f0000001a40)="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", 0x1000}], 0x6, 0x9d18a9e9d221097a) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r8, &(0x7f00000001c0)={0xfffffdb3, 0x0, 0x1, {0xfffffffffffffffe}}, 0x18) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:51:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6100) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x3, &(0x7f00000002c0)=[{&(0x7f00000000c0)="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", 0xfe, 0x5}, {&(0x7f0000000400)="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", 0x1000, 0x80000000}, {&(0x7f0000001400)="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", 0x1000, 0xfffffffffffffffe}], 0x214, &(0x7f0000002400)={[{@rgrplvb='rgrplvb'}, {@lockproto_nolock='lockproto=lock_nolock'}], [{@fsmagic={'fsmagic', 0x3d, 0x20}}, {@fowner_lt={'fowner<', r2}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@uid_eq={'uid', 0x3d, r6}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'wlan1@'}}, {@uid_lt={'uid<', r8}}, {@seclabel='seclabel'}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2033.771815] binder: 23339:23341 ioctl c0306201 200003c0 returned -14 21:51:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x9, 0x0, [], [{0xffff3785, 0x5, 0x10000, 0x1, 0x3, 0x80000001}, {0x10001, 0xf5, 0xdd, 0x3, 0x3cad012d, 0x2}], [[], [], [], [], [], [], [], [], []]}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x4c440, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000080)) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:34 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2000, 0x0) r0 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x323) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8fff) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 21:51:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000e45ec36c0440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:34 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000000)=@caif, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="47da48c5876d0b4344da23c8cebdcd9c248994083411d8c0004fc646cf4e223912697ec5b8a27281623b5922e665729e46222f0bdd8507d962013dbbc95796fda2b3ef0a96a8477262ff5d34d97567d292391a4bcabca51bf5a216bc3dbf6d882a55b60b5ece7adfae11317fc29f7f1394ea7569c2d7d37ecf43ad5b0c0d6259017362a5c9cf2fcd48fae61fd4e3c393893bb4c10f4f08c23bf817d71299dbd0ce9d94bd", 0xa4}, {&(0x7f00000000c0)="0d18532418668a802148d276bf45a7cb1b42e4553c9cb52f50b1996bd88391faf76b1245c9381f8688eac5e3f27048969047ffe575bc1c", 0x37}], 0x2, &(0x7f0000000400)=[{0x20, 0x84, 0x2, "fcf0e6fa84682bb8321f140d0321"}, {0x10, 0x10b, 0x6}, {0xf8, 0x1, 0x80000000, "2ac2bc1e980371a5512ff64d48ce6cd5625b0590f80e743b9054a339e7945591809c94534553deafcfe177aac30a05e51468d9e1609daf406a7dcc86b706298a545d06f01365c65883b1df5a377c5996ee0a2cd7c5a9abd874790d273d71132788ac1ec43f07051106ea9a46ab2abafe5da3a240efa63d1d49a2388d45b49f7416b5fa5e8fa0b0445db182d55a8b26b474994b5ad967a7af1a01ed9a1cd3cb09239a2f3b66a3771f242cfd4193fe0604656d40c048f4c876404e7f479d1c068bcfe8fd8fe0921eceadb9f38d4cb2501a64049fc0cc13d56dd87e1392820bdcfa5cb0b1cd987c09"}, {0xf8, 0x0, 0xb5b, "8615e18d61bb8b2e4d94b6e15ac3b3f3b74fd5fc9bd553888c2cb1c1e0a07dd77727bf8096407057c3a8716e2464cc7ed4db0d44b912d356c7544cafc8f73408a10777d6c9d2f20bd0772b6e6d20602d69825073392145ca4b8f6ccdd22fa6cb788170099d5ed5a828f44af5bb779f350cd6816bd9c44054f78b944d3af12be37de17a86744244bd2d109d594580d2ad1d74ae16804adff4569c4a9c17c9a504f538e722a65c0fb7afcff2f847aeb49624950cc2a5bd18a9d8db41533479513a99351d57ce365e7d04337d1a994fe2a9831fc8464684fcda54aa7f5f8c434aa358afc1ec"}, {0xb0, 0x10f, 0x3, "b961d01c1c97a9d196eaa51ce7acc9fa456f4e8fb316da8e9b5f497ba76901eaa984292de1fdd04510c8ca03c40692f42e8c774849cc68ae1a1cc0acb33aaba6846f47c0bd50c79526e514df88dd627681e47b039cd0940020d046ae4ed117f3af6728b6157bf8ea682c4b328dae76b16eeecdce3982ce7a1edbc3687696908f4d3fcee927c23893ac1d7795caad50c0079844801112c07cfe27e84d1d15eace"}, {0x48, 0x0, 0x400, "f6b1c11f61324bcdb518934cd197fa7f279ffa1dbab96abb906bd486b746340966e1037486793fcf6e803bb3e4551bec03c900"}], 0x318}, 0x889df) r3 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8fff) ioctl$SIOCRSSCAUSE(r4, 0x89e1, &(0x7f00000002c0)=0x9) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000280)="04", 0x1}]) [ 2034.054356] binder: 23411:23412 unknown command 0 [ 2034.059375] binder: 23411:23412 ioctl c0306201 20000200 returned -22 21:51:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000080)={0x8, 0x8, 0x4, 0x0, 0xff, {r3, r4/1000+30000}, {0x0, 0xc, 0x5, 0x8, 0xd0, 0x6, "ebc472b7"}, 0x0, 0x0, @offset, 0x1ff, 0x0, r1}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x441202, 0x0) r6 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0x323) r7 = open(&(0x7f0000000240)='./bus\x00', 0x4406c0, 0x0) sendfile(r6, r7, 0x0, 0x8fff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000200)={0x0, 0x3, 0x4, [], &(0x7f0000000180)=0xf9}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xffff) r8 = socket$inet(0x2, 0x3, 0xa0) r9 = getpgid(0xffffffffffffffff) ptrace$getregs(0xe, r9, 0x6, &(0x7f0000000280)=""/188) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x15, 0x0, 0x0) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) r12 = syz_open_dev$media(&(0x7f00000003c0)='/dev/media#\x00', 0x9, 0x373fcb214d1ad89d) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r11, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1b6dbec9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r12}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r7}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2034.112142] audit: type=1804 audit(1577137894.251:8998): pid=23415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir447032748/syzkaller.bNKEoG/1638/bus" dev="sda1" ino=16660 res=1 21:51:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2800022}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x3f5eac3a579b1169}, 0x24041090) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000140)=[@release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c25e994efd18498d66205baa68754a3f5ffffff0200"/40, 0x28}], 0x1}, 0x900) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) r5 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r5, 0x28, 0x6, &(0x7f0000000100), 0x10) setsockopt$inet_msfilter(r3, 0x0, 0x15, 0x0, 0x0) 21:51:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000080)) 21:51:34 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) r0 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(0x0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000280)="04", 0x1}]) 21:51:34 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f00000000c0)={0x0, 0x4, 0x2, [], &(0x7f0000000080)=0x8}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 2034.309447] audit: type=1804 audit(1577137894.441:8999): pid=23422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir447032748/syzkaller.bNKEoG/1638/bus" dev="sda1" ino=16660 res=1 21:51:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x20000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x400, 0x0) r4 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffc7e, 0x0, &(0x7f00000002c0)=[@free_buffer={0x40086303, r4}, @acquire_done={0x40106309, 0x1}, @exit_looper, @exit_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002880)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000002980)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@bridge_dellink={0x4c, 0x11, 0x300, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x400, 0x2900}, [@IFLA_PHYS_SWITCH_ID={0x1c, 0x24, "15cd6aa904cff3fdde5132278493e020aee79ade1854"}, @IFLA_TXQLEN={0x8, 0xd, 0x6}, @IFLA_EXT_MASK={0x8, 0x1d, 0xffff}]}, 0x4c}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, &(0x7f00000000c0)=0x4) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000080)="192184770e64bb90bac015efaa028f1d", 0x10) 21:51:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x805}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xb500ec9a041c9b97}, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r2 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0xfffffffffffffffd, 0x404080) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x15, 0x0, 0x0) [ 2034.583604] Unknown ioctl -1070571007 21:51:34 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x800, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0xfffffffffffffffd, 0x0) setrlimit(0x1, &(0x7f0000000140)) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'eth1'}, {}, {}, {}, {}], 0xa, "ed792ea014ac9ad2a3ecba00f763662ac35c518e04205d885d4420ab9489e7dd6fa445c11d3f17cf74c18af1388e45ddc67a1c361c6f62e39c4b76092f3555b2cb1590701f50803ea4cb25cf38"}, 0x61) io_setup(0x3, &(0x7f0000000080)=0x0) r3 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r2, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000280)="04", 0x1}]) 21:51:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000080)=0x2) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050cb8000000000000000000000000800000"], 0x0, 0x0, 0x0}) [ 2034.636377] Unknown ioctl -1070571007 21:51:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0563c627c1fa830440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) [ 2034.826946] binder: 23475:23478 unknown command 667312901 [ 2034.836387] binder: 23475:23478 ioctl c0306201 20000200 returned -22 21:51:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0) ioctl$TCSETXW(r1, 0x5435, &(0x7f00000000c0)={0x800, 0x8784, [0x8000, 0x7ff, 0x3, 0x3, 0x1], 0x7}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000100)=""/214) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 21:51:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8fff) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x3) getsockname$packet(r4, &(0x7f0000000240), &(0x7f0000000280)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r10, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000002500070500000000000000001a0000a6", @ANYRES32=r10, @ANYBLOB="0000ffff0000ffff000000000cb40100677265640000000004000200"], 0x34}}, 0x0) r11 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r11, &(0x7f0000000000)=ANY=[], 0x323) r12 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r11, r12, 0x0, 0x8fff) r13 = accept4$inet(r11, &(0x7f00000002c0)={0x2, 0x0, @empty}, &(0x7f0000000300)=0x10, 0xc0800) setsockopt$inet_mreqn(r13, 0x0, 0x23, &(0x7f00000001c0)={@dev={0xac, 0x14, 0x14, 0x1e}, @empty, r10}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/de\a\x00', 0x0, 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x59121fbf3829081f, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r6 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0x323) r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8fff) r8 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0x323) r9 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x8fff) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r5, 0x5}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r5, 0x800, 0x800}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000300)={r5, 0x0, 0x3f, "0286cee2ab1d946ee10ad2b66ff62f386551daefb908f073b76b53ea4e4e31e98f00bfe7d875ac88ce6e60824ce0aaf5e6684e7a67af98291a4547fe69e822"}, 0x47) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e20, 0x1, @local, 0x9}}, 0x3, 0x4, 0x1f, 0x1, 0x5}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={r10, 0x1000}, &(0x7f00000001c0)=0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r11 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 21:51:35 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x100001, 0x0) epoll_wait(r0, &(0x7f0000000200)=[{}], 0x1, 0x9) open(&(0x7f0000000180)='./file0\x00', 0xcedcec42d58dc9d0, 0x1) setrlimit(0xb4f71c1c203da1cf, &(0x7f0000000140)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000100)=0x1) io_setup(0x3, &(0x7f0000000080)=0x0) memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000840)="6118d2a6fa106f0e0b1edf79016f0f73f25a06b8b57a283d0d87e5ea92d25f52bbddb1454b6e74f193756357a11f01222dbc", 0x32, 0xfffffffffffffffb) r6 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='g', 0x524, 0xfffffffffffffffb) keyctl$revoke(0x3, r6) keyctl$dh_compute(0x17, &(0x7f0000000880)={r5, r6}, &(0x7f0000000a00)=""/153, 0x99, &(0x7f0000000bc0)={&(0x7f00000008c0)={'vmac64(blowfish-generic)\x00'}, &(0x7f0000000ac0)="bdab97cb660ee34edafee73b73e307c58f906379feae8505cda4c7620b8d3e473a445ba6d2e9cf9c742286bb007e0073bbffa83c58ae81dd2f514efa8429abd4a9e54ca44f0f98262a122772c5fde74db897e65b6df396f7f12eb63141dc47b7fcd7d3fb644d2946e79a84720e55c2f34b40f1c080cfdc92592d6a88a61645cd8497de7526ff0edab1103f0fcf04fc4d464907c90e81e29c8a325b538391b97dca9492effb1e2eca1d12be95492b848cee77edd2bdcaaac7406d7720dc2af95745bbad33ccb81680c8315d3cec7b04a6a4e91224a14fd98201c8dd9cdce1c67562ecbc35c2e91c44ca2d", 0xea}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000400)={0x5, 0xc, 0x4, 0x10000, 0x5, {r7, r8/1000+10000}, {0x6, 0x0, 0x0, 0x1, 0x1, 0x3, "c76a1d5c"}, 0x7fff, 0x0, @userptr, 0x7fff, 0x0, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r11 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r11, &(0x7f0000000000)=ANY=[], 0x323) r12 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r11, r12, 0x0, 0x8fff) r13 = creat(&(0x7f0000000600)='./file1\x00', 0xb8b784c7b3fe4abe) r14 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r14, &(0x7f0000000000)=ANY=[], 0x323) r15 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r14, r15, 0x0, 0x8fff) r16 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900)='/dev/nvme-fabrics\x00', 0x0, 0x0) io_submit(r1, 0x200003cc, &(0x7f00000009c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x5, r3, &(0x7f00000002c0)="7c3e0481e154f33ee0a6c6653c4bff6aae0e082c", 0x0, 0x3d8304f8, 0x0, 0x3, r9}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x40, r10, &(0x7f00000004c0)="decca3360840fca56f7694053592754cee1a3bf47c2f0e28bc2e9a714449a2e9b042af0b4d152572ca7f0620ee1f9fd7a70b856d9e7e77d49e00313252af24898d35a50e807c6cd5978e80f080c8483de2c98447d7a8524459aea7c9d90b52ae9310e0cbf0910c2e7a9f6f9d901f560cb7be9c88ffb4267cb809e5d5ec1475e6cf04dd3ad1ec469c1d4d3da1b5774e6d1dc0c990be7e075305a79d839377cd2c0a60f1aa378b763295a26f927e00bedcb4ab6c804e9e127266cab0a0d5de4e7d7b11700a0edb83c4f05e8fd01b02d1e35a844336e5e826", 0x0, 0x2, 0x0, 0x0, r11}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x8, 0x1, r13, &(0x7f0000000640)="d2a716ba4473727ab0ae4c6aa4b316c3a94261e5bee6108b240ab8a45b467408ed15245715819fc39185b1bd43978644e3facf3480eb760b3425d1efc9c8eaddd299ba0a98653d58af8afdcf8a814c32cc3f068de04d2c9a10bc8cd30374dc9c949ab2c1e4bc1285a45956a40c04f988206b7ad2c96a7ab6bdca32315f7cd5e0f6d668499891f622b60cfc49e826753734506a2f570c052948a0f0643730a0d7706463a8af89dc3ef207b4dc9c60f777c9ea0ea65afb7a737cf3f90de3f85f8856c9ed2247308e4145efebc9a25cf6aee76df51defc2f95eaf2e7421622891ab95428607d8be32ccb5fd7fd507bd99b03ab6cdc5b398f2", 0x0, 0x100, 0x0, 0x0, r14}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x8, 0x6, r9, &(0x7f0000000780)="9194261032656320d44103f65b0c854655839522a770731445bf06d029a0a1c17f16befa73a155c1072b8e230ca2195ee26e4dd3e9dbce6cef8405345e50fcaabf2ebf26d60ee6af043bf04093d1a34cef4a325f39bb5ee5de9720ff9a4ee611e327106e7e4ae320f5a075f6626051a6e7b464", 0x0, 0x8, 0x0, 0x0, r4}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x2, r16, &(0x7f0000000940)="4fba9fb36904a5b8c5c0586634a9abc61ac37ebeee4fea7e78c18c0982149e849fae511af69acaeab5f817dc982d54cd", 0x0, 0x2, 0x0, 0x1, r10}]) 21:51:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x801, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8fff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000a40)={0x13c, 0x0, &(0x7f0000000880)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x100}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x1400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/242, 0xf2, 0x1, 0x36}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/148, 0x94, 0x0, 0x37}, @fda={0x66646185, 0x4, 0x2, 0x24}}, &(0x7f0000000480)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000600)={@ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/153, 0x99, 0x1, 0x21}, @fda={0x66646185, 0x5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/91, 0x5b, 0x2, 0x10}}, &(0x7f0000000680)={0x0, 0x28, 0x48}}, 0x40}, @release={0x40046306, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000007c0)={@fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x4, 0x1, 0x22}, @ptr={0x70742a85, 0x1, &(0x7f00000006c0)=""/193, 0xc1, 0x0, 0x2a}}, &(0x7f0000000840)={0x0, 0x18, 0x38}}, 0x400}], 0x67, 0x0, &(0x7f00000009c0)="8dd43fc64b8cb4194a67fdee7d6a494e9921f4fc46c706b67a2021f912c2fc33bbbd9029f6b46d4f99b8e416135275586b0d886749b25b0eed0794c1bfde5ae369ba6b3852c5358da810e49e691a8ae296b5b977716808526a5ee28bf3aa5d71519d679b369ad4"}) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x2a) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:35 executing program 1: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r2 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r1, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000280)="04", 0x1}]) [ 2035.203636] audit: type=1800 audit(1577137895.341:9000): pid=23491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=17077 res=0 [ 2035.324347] audit: type=1804 audit(1577137895.431:9001): pid=23496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir447032748/syzkaller.bNKEoG/1641/bus" dev="sda1" ino=17089 res=1 [ 2035.374131] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2035.493615] Unknown ioctl 1074025835 21:51:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xb) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r1, 0x4b37) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 21:51:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x0, &(0x7f0000000080)={@empty, @initdev}, &(0x7f00000000c0)=0x8) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="e5847b5d"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x1c, 0x0, &(0x7f0000000240)=[@request_death, @release, @exit_looper], 0x0, 0x0, 0x0}) [ 2035.529095] audit: type=1804 audit(1577137895.441:9002): pid=23497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir593238974/syzkaller.IePVN6/1847/bus" dev="sda1" ino=17105 res=1 [ 2035.633269] binder: 23511:23513 unknown command 1568376037 [ 2035.648337] binder: 23511:23513 ioctl c0306201 20000200 returned -22 [ 2035.656393] audit: type=1804 audit(1577137895.461:9003): pid=23500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir447032748/syzkaller.bNKEoG/1641/bus" dev="sda1" ino=17089 res=1 21:51:35 executing program 1 (fault-call:9 fault-nth:0): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x1f) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000110000032cbd7000fbdbdf250700000017336525ce1f6dc58286e1490641957f3bfe5390ce410dc5a8e03ede4707f787ccb3919f", @ANYRES32=0x0, @ANYBLOB="002000000000040000000100aaaaaaaaaaaa00000000210009000000"], 0x3c}}, 0x2040) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8fff) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x14, 0xfa00, {{0x6000000, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r4}}, 0x48) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xa, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r4}}, 0x30) 21:51:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="13860442"], 0x0, 0x0, 0x0}) [ 2035.773742] audit: type=1804 audit(1577137895.491:9004): pid=23500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir447032748/syzkaller.bNKEoG/1641/bus" dev="sda1" ino=17089 res=1 [ 2035.875898] audit: type=1804 audit(1577137895.501:9005): pid=23501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir591060983/syzkaller.OuNs5A/2393/bus" dev="sda1" ino=17093 res=1 [ 2035.915522] audit: type=1804 audit(1577137895.521:9006): pid=23503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir509740448/syzkaller.yA8vW3/1199/bus" dev="sda1" ino=17109 res=1 21:51:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0xffffffffffffffc3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x4, 0x38, [], 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/56}, &(0x7f0000000280)=0x78) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r4, 0x0, 0x1f, &(0x7f00000002c0)=""/41, &(0x7f0000000300)=0x29) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x2000, 0x0) [ 2035.966571] binder: 23524:23527 unknown command 1107592723 [ 2035.999178] binder: 23524:23527 ioctl c0306201 20000080 returned -22 21:51:36 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8fff) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @multicast2}, {0x3, @local}, 0x2, {0x2, 0x4e22, @local}, 'bcsf0\x00'}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000040)={0x297, 0xffff, 0x1, 0x3be, 0x3}) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 21:51:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x12, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0xffffff30, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000040)) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r5 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="88960000000000000000"], 0x0, 0x0, 0x0}) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000140)={0x7, 0x0, [{0xb, 0x6, 0x400, 0x7, 0x7f5}, {0x80000000, 0x988, 0xf2f5, 0x8, 0x1}, {0x80000007, 0x2, 0x1e3, 0x8}, {0x120000015, 0x78, 0x6, 0x3, 0x142}, {0xc0000000, 0x1f, 0x40, 0x3ff, 0x2}, {0x0, 0x9, 0x1, 0xf5, 0x5}, {0xb, 0x8000, 0x4, 0xfffffff8, 0x5}]}) 21:51:36 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f00000002c0)={'NETMAP\x00'}, &(0x7f0000000380)=0x1e) r1 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x2000000000000089, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000280)="04", 0x1}]) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/65, 0x41}, {&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f0000000180)=""/172, 0xac}, {&(0x7f0000000100)=""/12, 0xc}], 0x4) 21:51:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x30002, 0x0) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000080)=""/184, &(0x7f0000000140)=0xb8) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000180)=""/102) 21:51:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) close(r2) [ 2036.306795] binder: 23544:23549 unknown command 1717991472 [ 2036.353416] binder: 23544:23549 ioctl c0306201 20000200 returned -22 [ 2036.363894] binder: 23544:23553 unknown command 38536 21:51:36 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="b79e040a"], &(0x7f00000000c0)=0x4) r2 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) io_submit(r0, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000280)="04", 0x1}]) [ 2036.419465] binder: 23544:23553 ioctl c0306201 20000080 returned -22 21:51:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0x0, 0x8}, 0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r5, 0x800, 0x800}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000300)={r5, 0x0, 0x3f, "0286cee2ab1d946ee10ad2b66ff62f386551daefb908f073b76b53ea4e4e31e98f00bfe7d875ac88ce6e60824ce0aaf5e6684e7a67af98291a4547fe69e822"}, 0x47) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in={{0x2, 0x4e20, @rand_addr=0x1ff}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r6, @in={{0x2, 0x4e23, @loopback}}}, 0x84) 21:51:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8fff) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r6, 0x80605414, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:36 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/d\xe5v/dl\x80-contro,\x00', 0x200, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x410c00, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8fff) r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8fff) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000180)={0xd1, "6a6e06ced41e1b4286b1e7e3e15cb0d14905196b87182aa1ba7a6d157767998d", 0x80, 0x9, 0xd08, 0x1, 0x1}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) ioctl$RTC_WIE_OFF(r8, 0x7010) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}) 21:51:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000e0000000e376f101b662adc5369cee5f91102a3113f093f128535e63fa5cd293b88b075697b2a91c9db45aef79806f30a00b59c9ebcd7a650401917094f4550df1668489ade11e4c0ba80a977fd2414a4d514634b3d2b603a41e2d3780bcf3954e03c589033d67707e04f80d38d72a9a10f5646f6f0ade24b3616f3e7c09363ad0c48abf2ee483c772b99b8c1c52e80806004b8c27311bcda4c4ff72fde4a1f334221a7f8b8254abbf6fd262abc3130b10aac6569fc03de107899168dff9d2464fc5654966c34924d8e8972baf95e83b5ec7ac321a1855472c094f94929d72cc5f0f4fbad6b51060b9f61b542c1ee1df462285d5473f3d07474b12812eb91bc5ea56e289dd6a75fe67a369db93bb32fa6c20da109e3268138d4d5f6fc4bfe1f01e23b997494a3cb2219a6cdbf37b60994d5f9af9a3a234d9bf5e0c9d36c11dd4385f057f4850036142629d4bd0b433c9d3a25b83c4aacba4019850e030312514b8ac7762"], &(0x7f00000015c0)=0x104) r3 = dup(r0) r4 = eventfd2(0x2, 0x800) fcntl$setlease(r4, 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x101) r5 = socket$inet(0x2, 0x3, 0xa0) socket$netlink(0x10, 0x3, 0xa) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0xfffffffffffffd53) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x15, 0x0, 0x0) 21:51:36 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000080)) 21:51:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r5 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) sendmsg$inet_sctp(r5, &(0x7f0000000740)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000100)="309da23708", 0x5}, {&(0x7f0000000140)="09210ed00e45e560c03baaf4d876f649c2d40ee0b7a7ef8baea5e6c586152e0b8fe934dec4340aa520977e02dc0bdda3ea9ffe905b927100ff81e53b3d26253473cd3c79be993a82bee58c4f0fad88310d0bafd191ec7f12355f3cd3186be506a0bee3a34aebe6199c65ca7c7f9fb3300d7b29ef7c658c543a2659095b0fd2a5801365c66f040cb2b45dfd8630870edfd34697c0687275449d1d7bcb57029b8819932c3eb21de583bfa3a5539169c1c12130a3", 0xb3}, {&(0x7f0000000340)="e1ae25b9aef588edc3ecc2a79f38f533c43db9f0fd61026f54894e0e10a8d13f18a1a3fd9519ed26c0b5a007d63b60a8561df0f94433967e49eeadd3a188ffcbb105159f55408f07429b0cff67d0641cc636c6b80e6f9024cc39fe4c33f7c5b23878b2ab2e9e3d4c1aa39d3c5e7f6bfcc54ca126d907368bf4c011334001c72a6e21f8533b84879bac68e5eb7f3edd2c9aba85831457c3216aaa51e554b47d7dea689083d378f8d1", 0xa8}, {&(0x7f0000000240)}, {&(0x7f0000000400)="9c5209c0e0871e0ce2e9f380c66ffefc52388b392947e79f4833a39a0cffe1bec0232c2a408d18224753fec8e40e5e70ea38f8710b31ab536ead3c53cfd1290e7c1eef9c5932cf64f34c451b4fc9262b3fe4c42bc10bd4c0fbb5c1e960015d70ec6022dbd9b9cb36ce7f5e35a2baf2e1957ee5e63e8c9a0b26d167b581ace377c466b64006117a9b55e5eb0478c4f44334dc1fbd3541c2ec756626f667fcf5f3cfc07b862a6ce7f5d085a6dd076ee235362ff838f2b20a7723bad8f1e2a5160924b433c9cb62aa5cefca9e1b13d59e35fd048f4db19f7634b0c003ec6d6b98", 0xdf}, {&(0x7f0000000280)="71cb6ebcac9359e91bc61bfd13", 0xd}, {&(0x7f0000000500)="31cb5728bb1d91a3d474cc60b663f962ddaba33a78abefee1b82f40e5b86878bdeb865c74da42111f5826afa4ec3315ddeacd1a84ac3", 0x36}, {&(0x7f0000000540)="8e3a0b903d5131232cac26c855496d87729520871c0a24bab6579881ba01f6df495e7ea3bbfbfb3025fc9506e7cfd852e6da326c701726fe61908b875360afe5ce6589f1dad678b45c0133c32746a125df49088162e6a1309a443c12cb9335b03bfc186d4cea3aaa535d81dcd29df16e0597a502a761195fde61db955356362748260a775f9cb16fa13fd8616fe294716884a7a6d769fa6db228f0140de6774427fff24de8493d56d6c7607b9882b07f3e23ea11fede53217f46f5d30cb3f9aeb1bf0ef498ab8813876bc4fc3b9a9c8527c682cd788e", 0xd6}], 0x8, &(0x7f00000006c0)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x10000}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @broadcast}}], 0x80, 0x4}, 0x10) 21:51:36 executing program 3: rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000140)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/585], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xff0b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x2d, &(0x7f0000000040)="791f476409b77e3c27312cece9e7", &(0x7f00000000c0)=""/45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) io_setup(0x3, &(0x7f0000000080)=0x0) r2 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$poke(0x4, r3, &(0x7f0000000180), 0xfff) io_submit(r1, 0x26b, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000280)="04", 0x1}]) 21:51:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f00000001c0)={0x16, 0xf4, &(0x7f00000000c0)="ea19560b7a456909eda7786b9ade123cccef908179d0897f0d2626e96ad9d704852ce5cf1ee30dbdcebed1418c254520e9359c900918208849847b63c0be8c485b0b0e30ef41c9142376883b564ee1ac3ec3fc3ade4e2dc5d4e26a124fff7d5ce741fbd17e6eb4f802172d45dafd1157c109e14873d9ef16aeb402c459270f3df453b9ccc041798c95a8b803a887675fab8dddbb061a4fbf77d7097c2f48fca6f2012ec8809625a68e5e888bcb1199881f56737f4434023e724e8cd3235f6bed92aba086bb7a1ea9b98d2cb2a39bb743d16bde0f2f4b28e43a0d4dce6776a02f85b2d70069a8450bed1fb3e4caecbd21d8fabfc3"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f8f4d382"], 0x0, 0x0, 0x0}) 21:51:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x990901, 0x2, [], @p_u8=&(0x7f00000000c0)=0xe1}}) ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f0000000180)={0x9, [0x3, 0x53, 0x3f, 0x10001, 0x1000, 0x0, 0x4, 0x9, 0xfffffffffffffd24]}) [ 2036.958942] binder: 23595:23596 unknown command -2100038408 [ 2036.965170] binder: 23595:23596 ioctl c0306201 20000080 returned -22 21:51:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fdatasync(r1) 21:51:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/de|/biXfer#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="e20c40001c79611402abd0c57f523eaebc5573d4332675f0242d61927e14485ab109e083112ef78a1b5133183fc9e9a154eab52abfaa0b058d384dc85f211e4f10258df6e379bf55fb72ac24ffe9d0399d47702be4514ec22bfa8512e80da26fb181682a18118129446ee43354208fe45ab6"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCAX25GETINFO(r4, 0x89ed, &(0x7f0000000140)) r5 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) accept$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000240)={0x2, 0x0, [{0x0, 0x1000, &(0x7f0000000340)=""/4096}, {0xb000, 0xb5, &(0x7f0000001340)=""/181}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000080)=[@dead_binder_done], 0xe6, 0x0, &(0x7f00000000c0)="d1d9b79cb5bef37500140569964d90fc96cc5a0ec7d100a26b79ed8be7ad74e236c6f2d007ac1f72bf9f3b0316ce5ac515c826a2309d6cf13e378735cfc92c78e23b3f8e01ce63d496d5d6106293029f6c49601f5946700cde7d5c30c0ae469e01790b1948cb13bc2ec8a81991808af3bbb8357ba0e364aed235cb17de681c8baae87c06397c82aead0132ca6e13b3cb7731cc3d0c9e13434e7b33ce0b8819fa3dbd2dbf13c50d1b51c6ffe16b6bb71fc599764e803f32a9e378c8193257f8ed281f138a782794cfa804d9a868c0a35b889a9212b25506c1ceeae78f9a9004f5d9999bd53ea0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ubi_ctrl\x00', 0x40000, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000740)=0x1e, 0x4) 21:51:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = add_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, r2, &(0x7f00000000c0)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '/dev/binder#\x00'}, 0x25, 0xfffffffffffffffe) 21:51:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001300)={0x90, 0x0, &(0x7f0000000240)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_handle={0x77682a85, 0x101}, @fda={0x66646185, 0x4, 0x1, 0x1b}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x0, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x420}], 0x1000, 0x0, &(0x7f0000000300)="d80e13760412b82b3273bd649dc6d62e20b53dcacc48d5c2ad385935042eb89fb7e14151ccdc0e5224934bbae03e818e2f97159ad56f50f0b705888839ef7c1f09e850f8bc57124430d798c79beedd3dba102aae07eead0cb5d5321d47cba8ee4322c4cb1f0ced5658953fdeb8e41ef76b3fd07737ca591076bf54b402165ad3a1398df200d20b3261d723b5fa0b2219f8e7bc8efc36e4685701e6b7695e31eecea5b1385bf31744a9fb33ef91798357c9e7509685c435c2bc2ff9db9d98ab32c6d9bed3589afad4f265fa403a4eac5a9d733651332314f58af152db1fdae9f2bc11909f04d698b25eb1d06e824b6da342f32d9f32e52d7a368fcc2a527b86d5359d4b4974cf13d8088e564c13bff9a07d268f4ae4d17b3dadd7cf125fdbbbc82018dc2b0100f90c66505d4896bb37a522429c5de5612ca35516db851ebab744b38f8b3a28a67044dbc7aa07f529b503a1c6187fa7910d52f52e1815e245ed826cd6d8571ae3237e5ab0af4e4bf4892a3b890a070df14a5bbb903da3181c18bd27147956755b566ad2b8e44c081a20634ac8c29dfabb62a3cc6e968ec7b09975c025520da979822e9fea4920caeaf319adee03f6440cf549eb1b054d5c19223643749c512dec0c7c5f3d3fcee430f0281ffcd719f51a5a9cc10e591e23b01a6c047b4e2c73549cdcaf5c7e2bf079c461b875fc5be414089e61e44109d2d610ad93ca971244951fc03841df51b499e46cf8cb23689622aca682b92f7db0cc864fe03313f4071152406eaa1339f397adb17d9a91b73d28dea5ea515b75c0a08a8c61d6b2005ff4faae3c645762fa73ec53df82ad7fffb272d48ce3f000bd641d8e12b43d1d9260bd40c6b293b6dcb8740e38a9a1a59fefa6d1b7b4e5b47c0494400b7ddad7e31b446fef074b1ee299aa47543dae4fc5c54b0d6f5b401d3c85392a4c9ac17ff40d00937b6436327ca5ee5485ebd45afc57853704d20890eb72d9363b72b9220331624edf2af9bd327b108e7614ebd31c87fc833bb4f141e43f039162aceed7eb014dbb73e5c3542a46c91354c10a4b6258bdf4dd9513e7892267930669ae584ffb58b29995d4d283552dd994e3601cd77957dcf0311c7ce95fcbaa45b69f7b0290f79f0b7dfa69cc5d2624c2168547181c07dc31c0863314dc8a69c20d3a958ed6db3d56babfddc02e43cd808f75e5e68c6f313d088faadd804922f02bcc224f138b7b62e23003bfb7059ab4a1ff22ee0d9d6b1795c4f2919781952614d5a2a699fc0c2114fc7c6fb4aab682a8dabf3810bf9985ca8c6ad899de5ed6e078d6f5350926d41a633646f189dbf1641a68110260f5c1947a18776a285a2b5e42ee3e20d6e0e8b4205485749d14c04679c7144d8d1ede1cce12da4a3838a2ef6a612e72f2ce3b1f00fa5b05a34d5a2549e9934ea419290a738a05c3bb8a38a7ceb3c4e5875dde27b6ddd27d3b15810a5ff364444544cd9ee330eba68c714d30348e08e3f5b7192fff01acda88eba61cd095955d2cb9ad659c1d19e6ca2a9f1142f89cb4f8b739afeb76acd93d42dfbf681eaa97743c2197c492b4d0dcd79717a2b97a054ca7721c594344c1ec41ed13946245fcb90d349260e0cf4606e5cec8960733414d0b152bceb78a3f48fe2fb7cc13cb853ee65d7c8abc1df9400c8d35a93ab433befcfedd2c86ddc5edbee08460788867099609c41a209a647f9b8f2f82acc9ce4226a8554a56d1ec786004cc04e2dde4f18d94ce689d5819b5a8929a1d5de258bd7c252a3bb0ab84928d76503e2f26797f612a7c3d3d7f9530efe81ba53ef793e2207d603cf030f31841750d02ca0a4a1d8b30e7b7a250abb477873b2c6224c692256ec75c15abfc340286390451160566316b0a71e440b06beb9795f3bc96e218a09e70b9c663e3f91feba95ca55159a8d64c4c977599136c44ab8d17b71a03490ed2f56a47e7e2aa71baf8347933d2e23dd98e9943a3106c32f88d8e97f33c9bc58b2efc2d3ef66ac9fb530fae233b1e7ecc9c5ee39414a80b0c694d5ae9a6c295a11d5a4aeb61c6c19b021a8fc62364fc058d88090727e7dde9aca6af8b13e26c7939c8d9d89ffe343d8e5170b966395abc6d47dced52819f74da6faa7bdaf112a2914bd75202d038516c5a566ea2f14247b294134a8ae2696eee273465309f547b8db2842e097021540284b6405888a4b4f879b45a584e43a0b7fb40eae12a0540513b3c17edc074be010241b0b2e471423cd93660e435d7f2f19a32c308d3a2506c05cdeae3fec610e17e860a3bfc42ab11fbbe8a1f6d32c6ba5d218ad8b787fd032a69f3d529ed4e0b807bfc5f4717adb52656ee7354f7a2ef873d5d2989fc6cd98f451d2cfc124fc82224f420f6492b274c1514082009da3e4cab631bf2572eb8130bbcd25787ca7588f8f15ee3e42c65af0e1ac7385ed83ebc959513cbd6195fd1cdcbf369d5f17e0febac442116ffda1a9820de85ccfcd49585b207724f858b25d21b3551b15641ee3a2fbac14f8e2c4e68d1920e5d6dfaa70f892c9ef020733972d83748c3edce66b09b6fc6a91895ad4de8aea50050d6af4d85827e31f9fe4e4aa0d3b95210a599d924dc6ebfd3a9ee9356cc96520fdb5fe5996d2f0a9c7ded85bbf272ac283120c1ac4269fd1e8ea985631ad3e6e1b520761aed5b7aa2e7022cb2a260e23fc885686ba764e86eb5a57a14a84db0287b6ea5428f84b6de09cad2532376da31a6409d42c45af406debed0f6891794a74285b8060cc194bae4edb0f80e270cb336e39d050cf23fa3c52eac1f28160214e12da2fb3a6cb5d997ad97f0c438f3570db7f0677750a565b2a274dd372661627f150328480aac45fb07588e8aa7801f0b83b9c0d0863eebe46eb9e6c3405e1ba49bd7e1f250626ce87639c99754aa60888a6e33ed29a37da97d4099c0153270937ef1c37ddb3fe3e16f85ede6e3e28fa14769b4bfdd3b9e41da3b9d22722e2d7f4f15b315ee11501f8040962704e8bf6a32cd888bb076bc3190370f9e5be19b4f6585f14c96e58ad112d88ed43b28e9666c60cea29110721b9b5d8500e601993b096f4996aca439a9f1bc68d41d0bb12bbc1e572701c7f3b7402bb789fa68cbccd904a51666ab600caba8b4f44f287526c98ff4034f6ca6b5a377cf6541eec711586d75bd93ef42ce2f21814816650e955d29024251196a00ed9b0a44bcdbe2de4a141af073bd7ff4f8c0a1da49752a85a409231e9135d392111c61af9481be6cb7e6d4b327b4f7fff02a8c3d4b0bd3a39c8d36c4d67dc81cf6910102f62de91d1d1f82fec442024e764834039506b07f7f2a36e594da1afd79906472b3e0b72527f970270e63c6c313f671efd3c96f1bb97fd074647c3e9e8751d3a58572e36679bbf9267bd1eaf6a3696e586148af01ff01f4b8f5af7b381efb8733d48cfe98b3f1e34dd38b0fc0663c303e53f6a633142d4bb855804d273d4888ff262de71011568c87319d44e03dfc1d2a35239aec8d85460f14843a0a910fc287da31dd969de47d4f7df254a8e25519304880b64c79c314daa502a4e74843cacef93fe07c3a9fb987f9302335d341bf811eee81237b8dd875e57a9c3dc5ee4ab86ef1b8af3eaa16e4b34b19c142092a88bc48b8a109bcf2c7f2cb7a25ab0f53a24060ec004697c8a279b01476b4e7563af54d3aa00e8597d2a429f4a5c3547f5a65f886c582a7734092dad62156071a0cf3d3ec3adee7caf666fa48357cfabab24dee6d0bf39b7120d7d165b5d851e92750e6fa6dd4aca923caf97a67363d2a838ad1dc2ef3c37ed0f8d990ebbe0ce16a16632e460268b0c18872cceafb045ea36d8075f649c8433ac9a69fce68d3708de7e69719dd99e13dfeeeced4174d9a780bd07200727fd2ddf59f554ce21fe3feafc49849f76b870f60ef0eef056755ff31e1bcbfbbc25ac17edeab96a4b118e7daaa6a9d9b92c6ba4eece864608acab9e9eaba5b2721a33f20468647e579e299e0e418823f32ae65505901bd38126f6b768359100e7f7986b63499a9472d5869084ff54a2a48da1abbe4b00212be2b1315d82b85b528750b90231dec66642ec9cf8f7d2acfa6c60475666ce73eb7b7ae8eb13fa321b39af1ab5df9385f083805bd20920a98295f489da0ee5c46d953df543904188d56ab6d65cd48f0af6a40bf8a3b515b592aa913ab12d7097b237e954acd885540728fbf244f35e0e06df3326cdc9b2f75193da8b7074527203b78f500ca4c11d5d7bf5d0ee8e4723e86a5fcc1bbd272016738c78d70d874476953b78aae5d4c3bdbb85a9a6faf742c36a6a8f6d815d1ed077baf41cc06e8df2cb03f14c1bb7bf32819f75792cc25607db500dc84d648e16e31b7c35b501857a801bdcbbe7ab566bd822b57a402e3125243b8ec2dcfd2d423591f885b1ce2ed11fb51a8e9cc2fe9e3d0d34ade198443d13f4a0196fba7128e9d5b862c60e2dbb01d9cbb873fbbd5e58a79508f27aef1684073f646534860147a8dbd2582a548b3ab7966aa21d8a261cbd9f8b216a2439d13492c8fd9129d25294f9659730c452fc5a5b81000d403cc6a3bed81342d11952f71693607673d0a69f5ba6c84b2da9a1f4020dae88fcae73a14791cbc1d790963c8dbfb3820be7efa8a5688501bb0680a2fce9eeac636803731a01d5c968029d4691bb8f55fb4ec9c41cd6759ab788bda13296bce5e9930414456e19a6ebc4fba9825acdb9914d56518e62667e472faf6c0d04f8449c8b34b265719a732373aa6b08263087121edcce21a6594084b68527599a8ed8b952ee4d7fd34f2c09405f9d5fc138667c2af9d1ec033427a0e0e8b2934bbf222c9b5cdbea10d74465cbd4afe81d40a7fed834bdbd3524d5fc161d4b7f6505762c7da9a31c257cec9d2a01cb4c85cf44c217c7b87bda9b428616fb0282158148f3b1331ba73b446d97174f99535353acf7bc9d1e0a1596972e5c844bd23a8d9281ad7fc1452b3a5e4bb12a0dd61b2e480b82a2fd8b4687903f6cce9b701e013c6776aeb60579f79ff85f128946a20fa43f0df93e3437727d7bafebf1e37a40d35d243abc190024739186cbd46efc59a4478d7d9f84c9b09baaa3445ba6372beb071d4327301ca98a66a18f7b87ca3c285b0007ad8972f8def9c8bf2305fdfaf434cd9486751c9dac13ff111484dae79db9210de26a4041dd1ed44450d97b78f7a8fdba7f5b18c58a3f8c40e68ad0b04d391fa6d9119f125cbee5d7b15bdfb89703c70aea380d53660b20419c1e5c5222c8521f9238ddf39bcdacdf1c59d948cde2ff150c665d72df8faa1b9b1bf1c00261dd96eb7e6d39721898e10b41c75f10fb506432170c8085adb263b3b0476f13a3d9565ba3ad459ed97668b0787838b86e28403288acb0abca009161647dbf3b1eba0ba81b9cbabbf2f4b97e0a46bf5fd105a1b816578a5386de97028553f0b4a403b39652d14b421d338acdd21d754652bb2eb521508b882c40dfc20b59b937c2e6c5f89fc51e5480e7448c5576669f805e8311bf6f3c50d1970f40de9543e6430e91a15ceaa74534c19043ab41b0d130cd45535083f72d921a8dd6bba7251a44ff5f48e1b1971cb9eef84dfb73154cc86dc21c4aac1245d06950efd79c56daa5d0952c80815dd81c80479b26ad350b85b6af8f7587fa0cdc2d3a3eed923fc4e8ecd1010f9a8523c0785caee6db13fc9dceb970fc45b1af3dfd48d918827f5df9200e11674bd28c9bbb0dd328b5cd9b914d7c62711099e2b8eb31b53637ccfac035d0bc1d23ff46b2b5132376e5b"}) 21:51:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x3800000, 0xfffffe00, 0xd6}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0x0, 0x821b, 0x3800, 0x200, r3}, &(0x7f00000002c0)=0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffd8ef}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0x80000000, @rand_addr="dd1684917161c474b6a081daedd31896", 0xffffffe1}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x10000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d35}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x81}, @in6={0xa, 0x4e21, 0x2f6, @empty, 0x6}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, @in={0x2, 0x4e22, @loopback}], 0xb0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0x0, 0x0, 0xd8, 0xd8, 0x1c0, 0x288, 0x288, 0x288, 0x288, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'ipddp0\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'bpq0\x00'}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'bcsh0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) ioctl$KDADDIO(r1, 0x4b34, 0xce) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpgid(0x0) process_vm_readv(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000340)=""/92, 0x5c}, {&(0x7f00000003c0)=""/236, 0xec}, {&(0x7f0000000500)=""/159, 0x9f}, {&(0x7f00000005c0)=""/166, 0xa6}], 0x5, &(0x7f0000000cc0)=[{&(0x7f0000000700)=""/232, 0xe8}, {&(0x7f0000000800)=""/206, 0xce}, {&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000000900)=""/131, 0x83}, {&(0x7f00000009c0)=""/22, 0x16}, {&(0x7f0000000a00)=""/145, 0x91}, {&(0x7f0000000ac0)=""/48, 0x30}, {&(0x7f0000000b00)=""/100, 0x64}, {&(0x7f0000000b80)=""/209, 0xd1}, {&(0x7f0000000c80)}], 0xa, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000400f1ffe6ff0000000008000100687462001c000200180002000300000000010000000000020800000000000000ce2000d675969062603cf97b"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000002500070500000000000000001a0000a6", @ANYRES32=r5, @ANYBLOB="0000ffff0000ffff000000000cb40100677265640000000004000200"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@bridge_getlink={0x0, 0x12, 0x400, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r5, 0x20f0, 0x40000}, [@IFLA_MTU={0x0, 0xe, 0x5}]}, 0x34}}, 0x0) 21:51:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x3ec3be40aeb2bd27}, 0x10) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) writev(r3, &(0x7f0000000700)=[{&(0x7f0000000680)="f5bd4459aa16b47806f47ed1314c9e1d28273c7a625be960ccd9ad92c91ecc0eed2f141f6d645f2bb4ffb779b63d59b122b7f20fe49d2721e575b9b326ba64f57f760574f671330c03c7551a43cb002982a821bccee9c868a095603adc31455ce692a8", 0x63}], 0x1) sendfile(r1, r2, 0x0, 0x8fff) write$FUSE_OPEN(r2, &(0x7f00000001c0)={0x20, 0x0, 0x5, {0x0, 0x10}}, 0x20) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="100080b3ce340001000000dfc37c"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x100) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffeb6, 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4, @ANYPTR64], 0x0, 0x0, 0x0}) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000880)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000900)={r8, r2, 0x0, 0x1, &(0x7f00000008c0)='\x00', 0xffffffffffffffff}, 0x30) ioctl$BLKDISCARD(r6, 0x1277, &(0x7f0000000640)=0xc6) ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x80044d13, &(0x7f0000000080)) ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000140)={0xc2, 0x8, &(0x7f0000000240)}) [ 2037.637249] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2037.649032] x_tables: ip_tables: ah match: only valid for protocol 51 [ 2037.652483] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2037.685140] x_tables: ip_tables: ah match: only valid for protocol 51 21:51:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8fff) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001240)='/selinux/status\x00', 0x0, 0x0) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8fff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000002d00)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002c00)={0x1c4, 0x0, &(0x7f0000002940)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000011c0)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/4096, 0x1000, 0x1, 0x3b}, @fda={0x66646185, 0x0, 0x0, 0x15}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000000c0)={0x0, 0x28, 0x48}}, 0x40}, @exit_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001280)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000001300)={0x0, 0x18, 0x30}}, 0x1800}, @release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000002340)={@ptr={0x70742a85, 0x1, &(0x7f0000001340)=""/4096, 0x1000, 0x0, 0x38}, @fda={0x66646185, 0x0, 0x2, 0x2d}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000023c0)={0x0, 0x28, 0x48}}, 0x400}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002500)={@fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r9}, @ptr={0x70742a85, 0x1, &(0x7f0000002400)=""/245, 0xf5, 0x1, 0x21}}, &(0x7f0000002580)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000002c80)={@ptr={0x70742a85, 0x1, &(0x7f00000025c0)=""/38, 0x26, 0x0, 0x36}, @ptr={0x70742a85, 0x0, &(0x7f0000002c40)=""/35, 0x23, 0x0, 0x36}, @ptr={0x70742a85, 0x0, &(0x7f0000002600)=""/246, 0xf6, 0x0, 0x39}}, &(0x7f0000002780)={0x0, 0x28, 0x50}}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000002880)={@ptr={0x70742a85, 0x1, &(0x7f00000027c0)=""/146, 0x92, 0x1, 0x9}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fda={0x66646185, 0x7}}, &(0x7f0000002900)={0x0, 0x28, 0x40}}}], 0x9c, 0x0, &(0x7f0000002b40)="ed98f26809fc09d8c6eafe9d867af1a5aad59c27f837b58f31f697b804982453182ae584eff11485beb7ed8e511d61fba7be185945adaa1ac4d22f0f0207692cad78af8e4923726b420c96fc18dca5d0460728505311f404bc6b02d40ee4747e4929ebf2bce60e76bff8a36f4f33e8856a001000de4e1f739c331578975ff4b5416f90fd66b17ff5af4ebe42063e1efeee3f355a03c1c7d4d3c54b1d"}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100043bd000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080088a8ffff"], 0x3c}}, 0x0) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x303000, 0x0) ioctl$SIOCAX25GETINFO(r10, 0x89ed, &(0x7f0000000140)) 21:51:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) 21:51:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="13e042bc03f80084adb0941fbab98a1e7d1721"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f0000000180)={r6, 0xe}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r10, 0x0, 0x8}, 0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r10, 0x800, 0x800}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000300)={r10, 0x0, 0x3f, "0286cee2ab1d946ee10ad2b66ff62f386551daefb908f073b76b53ea4e4e31e98f00bfe7d875ac88ce6e60824ce0aaf5e6684e7a67af98291a4547fe69e822"}, 0x47) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r10, 0xffff0001}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000340)={r11, 0x1}, 0x8) [ 2038.104073] binder: 23652:23653 unknown command -1136467949 [ 2038.111788] binder: 23652:23653 ioctl c0306201 20000200 returned -22 21:51:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="056304761d4b9d8c9ff3371b1953d734ba800f907744a9fc28a38e6cb1a81878438c00000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2038.441123] kauditd_printk_skb: 20 callbacks suppressed [ 2038.441133] audit: type=1804 audit(1577137898.581:9027): pid=23636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir447032748/syzkaller.bNKEoG/1645/bus" dev="sda1" ino=17013 res=1 21:51:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8cbb5c769023c5bb1b9389fedf2b5430fad44e89044911d86675872ecac06ad03c67f60645daeee71f857dd65e15b2"], 0x0, 0x0, 0x0}) [ 2038.582172] binder: 23661:23662 unknown command 1979998981 [ 2038.584184] binder: 23663:23664 unknown command 1985788812 [ 2038.594319] binder: 23661:23662 ioctl c0306201 20000200 returned -22 [ 2038.608292] binder: 23663:23664 ioctl c0306201 20000200 returned -22 21:51:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x1, 0x400000) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000100)={0x17, "ff5ed49e6db8e571182cc7591e7d70a06b7fa4b04b99d2e9e33fc741f9bb96c9302cdda02946fb685d1449fdcce6316a867afa5689cba9f20121812da9dc2290c0a37147a5e26f4f17eac034a812ab328078bef3eef0b9fc58c6481449113c4466d2a720478e3e0204326db701993dbb8b6e38d060d314f57c79850cb8f2798a"}) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = socket$inet(0x2, 0x800, 0x20) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 21:51:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) [ 2038.970930] audit: type=1804 audit(1577137899.111:9028): pid=23680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir509740448/syzkaller.yA8vW3/1207/bus" dev="sda1" ino=16655 res=1 21:51:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) getsockname$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) r2 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8fff) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000200)={0x8000, 0xa, 0x4, 0x4, 0x0, {0x0, 0x7530}, {0x4, 0x4, 0xaf, 0x1f, 0x3f, 0x80, "05498b29"}, 0x35a, 0x2, @offset=0x101, 0x7, 0x0, 0xffffffffffffffff}) r6 = gettid() r7 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0x323) r8 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x8fff) r9 = openat(r8, &(0x7f00000004c0)='./bus\x00', 0x0, 0x30) r10 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r10, &(0x7f0000000000)=ANY=[], 0x323) r11 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x8fff) getpeername$packet(r11, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14) sendmsg(r9, &(0x7f0000000b00)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r12, 0x3d}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000600)}, {&(0x7f0000000640)="c9a6e8ba33d6671da1c0458e964a371e772457a24ec238acf0c4cea88108caec213c0e37309c3ee0c53f5b0cfa34c722103499d8cff4210a335931bddbdf3f1ab16f88b2e4b200183b8546383f300d39f4356d1659e8df3be1ebea7ada246edda988ca654748fdb3844442bb5f5a4c8a1fad0ad8a04ccdb8135d90caf754b3186f3d5b64b3347c6c5c4c9a8fc972be541aef6303db20cc231252decef38163d0c0e2af41f35b1802d5", 0xa9}, {&(0x7f0000000700)="488732963c9f4c087250e15afef50efa7a9a33681837f45c1adb7ddf00a951a0809bdad20587a6399790539d721d8b8f13c2b4595668dfc5075994d70a67362ccf39d778e8acb57849cbd1d126ea1bfc095128165c8b70ec2309b1cf741e53b0d2ec2111b7b4a65d54aec46d60279e3e099272c875bcc5e75b62c50a312d895a2957ac17de8381e0ecc2a968b2", 0x8d}, {&(0x7f00000007c0)="96e9a3f99db9fbd1bd41bbfdfc46cfdf82ebcdaf6996e36ddbb47dbc1eac4456754eb72b4ed2c69df43bc045312a336d1cec4e53b44c9698016dccebbbde7b5c52901a49fb57fd48e79e622f68dc6fcf11d3257fbfb559ffd614d8d80fd9f91fcc3208c311c6682001dec7a83b07ca4963abd81eccdb0fd5e93904e54fde4f53a780ce91d4f9c50148bd8992e4e91a9af308539363b38102d96ecc79fd6395063de8766f91c08fb9e917f470ce475018efd4fc7dddde8827fc623501cf432630bf35f6d9a543d1d79fe44519df5d38551b32939d65007327e27933e5eb58ac9003ed101f256c50b944409bace809c802094c7fba86", 0xf5}, {&(0x7f00000008c0)="3e0daca9abbadf5ccb037d629cf422dc3c157faf0325ca563b628f509dba24d85636c22bd5cb34b63cac9596555250164342d21e7c633bdaa1ad6c2f4fa67415602ce8b00affd2b576e6d87090c383c735404d922b17ea769019b22a7e952fcc3d08a996899a994aaf50eed6ee47673eb2d62d145d5511384fda6cfdf87fddc109e01aa8932582a46dd28982a79741561ee7ed892a929aafadf40bee3fded1664d15759df075b412efa621c3d1be18353656db28c698f25f79fb3c915ef5c46adab53b06c2ac15449953a4bd608c207b8215650a", 0xd4}], 0x5, &(0x7f0000000a40)=[{0x50, 0x10f, 0x40, "440fee57b3f04f9aacd45a5d8e026058338e3cf92d2bddbf16a7cba5e84a97dd0dca7499dcc5bda6d522657bd42dd2e5b66c6ca70e00"/63}, {0x20, 0x101, 0x1ff, "a748e107063749297b06a35dbd4c"}, {0x28, 0xbe76acc57e947091, 0xfa, "75e2eb158dd078263719dd935afc0c22feb7f4"}], 0x98}, 0x20000090) tkill(r6, 0x3c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r13, 0x407, 0x0) write(r13, &(0x7f0000000340), 0x41395527) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r6, r13, 0x0, 0x9, &(0x7f0000000400)=':)m&proc\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)={r14}, 0xc) name_to_handle_at(r5, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0xd4, 0x7, "3513ba4b25029e561cde2cfd1fa53314252d10441f511b0457ecbfc9cfdb3d6c20096a2dc8ca06cec9e687f887d0557232d0254c0194534a94802342e1a2d6a176f45bb3a9b9c2033317d2cb31b7f23d66d9b0463c092531f080ece8bfaa68c3fcb84c45a9ce9001f2073fcb499fcc2145b36326b12d02fe26e6e8963dae3b9fb0e9032bc9dcf66f84a01fed59ae44bdd139df32a8b1deb0d0280e2e3899d8874ee32ef2777fb02aff4755a28ebec749396333f02d97580906995cac5979e83e37661a14245a3fe1a547f629"}, &(0x7f00000003c0), 0x0) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000180)=0x9, &(0x7f00000001c0)=0x2) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "43d3ebf3196b1220", "a8d0369235853bd4bca898816f419f8e", "6efcf699", "cf755f9cfd289353"}, 0x28) 21:51:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f0000000100)={0x1f, 0x101, 0x3, 0x9, 0x200, 0x7e, 0x4fa, 0x173c}, &(0x7f0000000140)={0xfffffffffffffffd, 0xecec, 0x1f, 0x0, 0x7f, 0x8, 0x200, 0x93}, &(0x7f0000000180)={0x80, 0xc000000, 0x3, 0x6, 0x1c000, 0x40, 0x3f, 0x3ff}, &(0x7f0000000240)={r5, r6/1000+10000}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) [ 2039.116665] audit: type=1804 audit(1577137899.251:9029): pid=23680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir509740448/syzkaller.yA8vW3/1207/bus" dev="sda1" ino=16655 res=1 [ 2039.187900] audit: type=1804 audit(1577137899.321:9030): pid=23687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2921/bus" dev="sda1" ino=17078 res=1 [ 2039.279861] audit: type=1804 audit(1577137899.371:9031): pid=23691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2921/bus" dev="sda1" ino=17078 res=1 21:51:39 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="aaa00000"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r6 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r5) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 2039.308611] audit: type=1804 audit(1577137899.381:9032): pid=23691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2921/bus" dev="sda1" ino=17078 res=1 [ 2039.339732] audit: type=1804 audit(1577137899.481:9033): pid=23692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2921/bus" dev="sda1" ino=17078 res=1 21:51:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42080, 0x80) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000080)=0x1) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = gettid() pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x2, 0x1f, 0x87, 0x9, 0x0, 0x5, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7684112b9ee940e9, @perf_bp={&(0x7f0000000100), 0x2}, 0x10041, 0x5, 0xab, 0x2, 0x40, 0x5, 0x3}, r3, 0x10, r4, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e630c40000000000000000000000000066304400000000011634840000000000000000000000000000000000000000000000000000000000000004600"/100], 0x0, 0x0, 0x0}) socket$inet(0x2, 0x1, 0xc6) [ 2039.384081] audit: type=1804 audit(1577137899.521:9034): pid=23692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2921/bus" dev="sda1" ino=17078 res=1 21:51:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3cfaffff0f0043bd00000000000000bf1dd1fdc9", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080088a8ffff"], 0x3c}}, 0x0) [ 2039.494793] binder: 23694:23697 unknown command 41130 [ 2039.500327] binder: 23694:23697 ioctl c0306201 20000200 returned -22 [ 2039.531844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pig=23702 comm=syz-executor.2 21:51:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x14500000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x18, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x9}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 21:51:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/bir\x00er#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0}) 21:51:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100043bd00800200de00000000001000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000400080088a8ffff"], 0x3c}}, 0x0) 21:51:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd0d, 0x0, &(0x7f0000001740)=ANY=[], 0xfffffffffffffd6e, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="066304402adcf65ab470a4c559d758a0eff71c1ea0c8d17acf7438b6e691f94318034bce39fa6b43b9b5104f76cb84481c1b36a389055a3d3878654cab988b41e66ced26e48e6e22e27b64172bf16c00e19d10f73a64a2b8b6cc"], 0x0, 0x0, 0x0}) 21:51:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080088a8ffff"], 0x3c}}, 0x0) [ 2039.831027] binder: 23717:23718 ioctl c0306201 20000200 returned -14 [ 2039.882120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pig=23721 comm=syz-executor.2 21:51:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000340)={[], 0xfff, 0x0, 0x6, 0x0, 0x6, 0x1000, 0x6000, [], 0x20}) r5 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x3d7, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYRESHEX=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000002500070500000000000000001a0000a6", @ANYRES32=r4, @ANYBLOB="0000ffff0000ffff000000000cb40100677265640000000004000200"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$inet6(r9, &(0x7f00000003c0)=""/235, 0xeb, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x1fa, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000002500070500000000000000001a0000a6", @ANYRES32=r8, @ANYBLOB="0000ffff0000ffff000000000cb5010067726564000000000400020078af3d9a68e6b41fc7527aae48692ca5891b47e51e7c3df0ebeed600fc100025c07a24bcbbf8de7b3b4609a8be9d2ce4408c37b8ff0bf5fd2868302f1944a42009402a8cce71b1ac6da04d3f310e800486641aff100cb562df48031019787e0f8e31d7cba77fb216f57aa7365fb51846"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000005200020026bd7000ffdbdf251c08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="000000af0b6a0bfa999dc54b59369ece9d841efe6f13ee738caf854a10a6403426d74895494505df61b2718ef69763815eb184ab0200ced59e998399481a418f3a5dff253ac8ef"], 0x24}}, 0x0) [ 2040.120453] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2040.141073] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 21:51:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000040)='trusted\x00', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8fff) r6 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000080)={0x6a32, 0x3, 0x4, 0x2, 0x5, {}, {0x1, 0x651893a62f9ee5ef, 0x7f, 0xb, 0x7b, 0xe3, "0100"}, 0x2, 0x0, @fd=r6, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x3, r7}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2040.449083] audit: type=1804 audit(1577137900.581:9035): pid=23737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir509740448/syzkaller.yA8vW3/1209/bus" dev="sda1" ino=17251 res=1 21:51:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) [ 2040.906939] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2040.920264] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 21:51:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getpeername$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e) 21:51:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8fff) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06590440"], 0x0, 0x0, 0x0}) [ 2041.076374] audit: type=1804 audit(1577137901.211:9036): pid=23747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir423096274/syzkaller.0IKwTW/977/bus" dev="sda1" ino=17252 res=1 [ 2041.166537] binder: 23746:23749 unknown command 1074026758 [ 2041.186820] binder: 23746:23749 ioctl c0306201 20000080 returned -22 21:51:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x93872f499065bd43}, 0x20}}, 0x4028800) [ 2041.236333] binder: 23746:23747 unknown command 1074026758 [ 2041.260404] binder: 23746:23747 ioctl c0306201 20000080 returned -22 21:51:41 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000140)={0x5, 0x0, 0x1, 'queue0\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000f4cbbfabd00000000e50000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080088a8ffff"], 0x3}}, 0x20000000) 21:51:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8fff) statx(r5, &(0x7f0000000080)='./file0\x00', 0x800, 0x20, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r3, &(0x7f0000000040)='./file0\x00', 0xee00, r6, 0x2413ad28e0169e96) 21:51:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0xe20, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f00000000c0)) 21:51:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001440)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r7, 0x0) fchown(r5, r6, r7) dup2(0xffffffffffffffff, r0) pwritev(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)="5c1e67da", 0x4}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001540)="7803214e010cfc3b951f160c2e5c253724c52d1e2ccfe0aa7e7738b2327434e9b1863a604e9fe8864db85f6682ae233fedb65c9e295897706e976dd2320d067703233054d2d7539ae35711a7d060469361cdc9170cee755986769950d5748fceee52e4bc61b26bd861797b090a954369ffcac8bf854c20c714452d19eeb3649aae5fc49e707441f29c13db5a172589e64d5a9bf8469af6b43cf36ba0b63c6e610c8d65b4fbc46e8d727471576be7643312312043e080264623ebbe2158", 0xbd}, {&(0x7f0000001340)="56894d12557d7b6f0498c1b4217dc2f3ac0e04213d2d2d27710c1b1050ba0637bb358d711d392406b265b64eb9f17ae1da626128b058c0f325c185391e616db06947e94704b8b8c8e9cdfcc3723b9133b47c560d556d730806f45e4cf8cb7b3eb23f0e89ffa209c1e7527daa3eebac9a557e1d01a8165b92b94fc50da4fd3b5f4ef1e5187d89e1ef655216d90a31465f4d8018226d46e33a31ed9b7f6fa7a37a09ad06b0b9c767d36fdfa0633c631f3dd6f1f0c822afd25a36e34524c040fb6db9f210e6ac33f41f737580cff369d9b8d6", 0xd1}], 0x4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000240)={0x9, 0x8, [0x0, 0x1]}) 21:51:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x12, 0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2], 0x0, 0x0, 0x0}) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="1d480c87d746188fc53ffb7cfd2859ceec64352d15377f58780d905bf90786c92e7132cadcf39bc609a83da01aef641e0c48e9ebb3085b524474c3b53413f8edf7", 0x41, 0x3}], 0x2011012, &(0x7f0000000180)={[{@nobarrier='nobarrier'}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@fragment_metadata='fragment=metadata'}, {@compress='compress'}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@nossd='nossd'}, {@commit={'commit', 0x3d, 0x6}}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x6}}], [{@dont_measure='dont_measure'}]}) socket$kcm(0x29, 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') 21:51:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100043bd000000000000000000000000154f5c16cc3bb3f85913a9cb55276aa4fbe45248195d84c5ea6c35b074f1a1dd8c95cdbf79a5675120c67a3ccbb4b95047f599c5f7d481dc6d24ce19330000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080088a8ffff"], 0x3c}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000003600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003640)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000003680)={@ipv4={[], [], @rand_addr=0x9}, 0x1c, r2}) [ 2041.780231] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2041.799216] binder: 23775:23779 unknown command 808482864 [ 2041.816711] binder: 23775:23779 ioctl c0306201 200003c0 returned -22 21:51:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x1802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x100080, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f00000000c0)={0xffff, 0x5, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) [ 2042.461408] Unknown ioctl 1078743882 21:51:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0563621878d76837af268fcdf60440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x17, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="5defdc70c7bacaf0fc60528bdbe08de17b2c6a15e0d2eb66f8df746458fe3d46b0061b"], 0xfffffff7, 0x0, 0x0}) [ 2042.571522] binder: 23788:23790 unknown command 409101061 [ 2042.575622] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2042.600577] binder: 23788:23790 ioctl c0306201 20000200 returned -22 21:51:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2042.625948] binder: 23788:23794 unknown command 1893527389 [ 2042.640723] binder: 23788:23794 ioctl c0306201 20000080 returned -22 21:51:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400040010000040000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012000c000100627269646765000004000200"], 0x34}}, 0x0) 21:51:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x97, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05ac692781ac917c5b5b5486f7e80a41390f2a607fef5355035abe0e6fe4245a828e02d81481054bfbdd0303942e073103835e0f264574bc05c03f367714422f9c8d546f3d2ec20ac33e942290f3210102326800f5083eeb3ebe4edbe827f022f781b770b36a961c54526327a6568796cbf8a5bf8d0080b13a47517cb46ef68120d8ea9b00c470bdc6eefa2d0a9eb709e823c040caee05"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) [ 2042.778634] binder: 23801:23802 unknown command 661236741 [ 2042.795385] binder: 23801:23802 ioctl c0306201 20000200 returned -22 21:51:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8fff) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x101, 0x1, 0x0, 0x9}, 0x8) 21:51:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8fff) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8fff) r7 = getpid() sched_setattr(r7, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r8 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0x323) r9 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x8fff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r11, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) signalfd4(r11, &(0x7f0000000080)={0x100000001}, 0x8, 0xce4ab3b973e46822) syz_mount_image$ceph(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000140)='./bus\x00', 0x6, 0x2, &(0x7f0000000180)=[{&(0x7f0000000380)="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", 0x1000, 0x7bc90314}, {&(0x7f0000001380)="f3e63c725f26355d5701e6b1cbe984151f09d08ec4957b89fc4cb5b3126afc3bc65db58589a1d93ba149fb6c6feb43234715c8be281800cd2e10fb0a6018f59f02ceb990a0096193f42ace252d34acd569b65cd29c336dac4458e3742848cc62f48ff339cc4045e545c3402d59fb5eaac3e8fdc29cc4c0181bcce23862c0d29d2a6fdce934bf69d6dff1099a401144d437538445dbaffdb1d8fc96f81467efa38e1eb2b667ba9c94655775adc78487096a48f3f14eb6aa876a8d45ee8501a1c80dd9b16a70efa8918370bf719e99a39231ea54", 0xd3, 0x4}], 0x2029501, &(0x7f00000001c0)='/dev/binder#\x00') fcntl$setpipe(r10, 0x407, 0x0) write(r10, &(0x7f0000000340), 0x41395527) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000002c0)={0xffffff1f, 0x0, &(0x7f0000003980)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYRES64=r4, @ANYRES64=r2, @ANYRES16=r9], 0x0, 0x0, 0x0}) 21:51:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f00000001c0)={0x3, r5}) fcntl$setpipe(r3, 0x407, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x204201, 0x0) r7 = getpid() sched_setattr(r7, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mq_notify(r6, &(0x7f0000000280)={0x0, 0x22, 0x0, @tid=r7}) write(r3, &(0x7f0000000340), 0x41395527) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r9, 0x0, 0x8}, 0xfffffffffffffd0f) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x800, 0x800}, &(0x7f00000000c0)=0xffffffffffffff3e) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000300)={r9, 0x0, 0x3f, "0286cee2ab1d946ee10ad2b66ff62f386551daefb908f073b76b53ea4e4e31e98f00bfe7d875ac88ce6e60824ce0aaf5e6684e7a67af98291a4547fe69e822"}, 0x47) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r9, 0x5, 0x8001, 0x7, 0x8, 0x7fff}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000380)={0x1, 'caif0\x00', {}, 0x8001}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="65539463"], 0x0, 0x0, 0x0}) 21:51:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065b943, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_FILTERING={0x8}]}}}]}, 0x3c}}, 0x0) [ 2043.186514] binder: 23811:23817 unknown command 1670665061 [ 2043.198312] binder: 23811:23817 ioctl c0306201 20000080 returned -22 21:51:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="746bbb3c000005040000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080088a8ffff"], 0x3c}}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x1, 0x101400) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x21180, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000140)={{0x0, 0x0, @descriptor="a105b2adf38ccbff"}}) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000000280)) r3 = dup2(r0, r0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000440)='/dev/video0\x00', 0x2, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ion\x00', 0x80700, 0x0) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f00000004c0)) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000180)=0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x44, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2300060}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x80, r6, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3e72}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0x20000006) [ 2043.320259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23826 comm=syz-executor.2 [ 2043.356958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23826 comm=syz-executor.2 21:51:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080088a8ffff"], 0x3c}}, 0x0) [ 2043.455904] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 21:51:43 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x44000, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x0, 'yam0\x00', 0x3}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 21:51:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000200)={'IDLETIMER\x00'}, &(0x7f0000000240)=0x1e) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x10, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) [ 2043.775532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pig=23839 comm=syz-executor.2 21:51:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05230440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death={0x400c630e, 0x2}, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000080)=0x4, 0x4) 21:51:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2043.960346] binder: 23841:23844 unknown command 1074012933 [ 2043.966039] binder: 23841:23844 ioctl c0306201 20000200 returned -22 21:51:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="056304408630eb3cfe7fba427d7fb5bec15e97be88005a451e99f7fad5e542d3d9c86802f4c4035b8a7186f2b0e0b339a4ea137b907dab11435531fec0bc39dea4fa3432dd1a70a7cff202bf996d6565c319ac6bc275ad7b1e9f4cf9b85ad6dbf5416f7f1827434fe1b5056c310a269be6c317ce4564ba41c5ef1aa216ff0ed85aa9fcac12dd02a0ee9d2b8508a733602df4b250f42e96ac30ccae4b9279790fec9c93946f84af7a12734c4248e7038901987ba2acc6bb8b915851464f78700b25f5e3c515ec0717060d3810edaf12e5ef5b22c055552a"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="054082a0"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x2) 21:51:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00~v\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2044.194284] binder: 23853:23854 unknown command -1602076667 [ 2044.204786] binder: 23853:23854 ioctl c0306201 20000200 returned -22 [ 2044.218634] binder: 23855:23856 ioctl 40045644 2 returned -22 21:51:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x324, 0x0, &(0x7f0000000140)=ANY=[], 0xdb, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000340)=""/202) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xec, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ca610000000060ec72f89e7ff9adc35bd9b14daf903e47609a2d6d22779529fdbdbcf3a69f0e1d557fba42ed0879db8204f53d8e9ec99de16d62400e17bc75b4dd267151b7d1b7357e398711789173fd15fb6b06cfaa226c8ccc5b9a13157cc59ea5161081a2e2d4dcfcee359afe17a608644b9ee71808aa16e37883c51ec382abd22f464ea74abd9040e8a9b6a5b6816ecd724da580a9d2a42a33fbb26ef9446ba9891bd1828a794482ea9a5fbd2bf5a7660fa335c32765c5a088db023f99491460b7e7f5287229035a1c224099bdbb5f6821b623de7cadd2d1a9e747fd3086dc6583d3df755de1c1beadb5"], 0x0, 0x0, 0x0}) [ 2044.336032] binder: 23859:23860 unknown command 7765504 [ 2044.346482] binder: 23859:23860 ioctl c0306201 20000200 returned -22 [ 2044.378149] binder: 23861:23863 unknown command 0 [ 2044.394902] binder: 23861:23863 ioctl c0306201 20000180 returned -22 21:51:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x1}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2044.424636] binder: 23861:23863 unknown command 25034 [ 2044.439775] binder: 23861:23863 ioctl c0306201 20000080 returned -22 21:51:44 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) pwrite64(r0, &(0x7f00000000c0)="b29db1458a27d9df2fb67483ad86c816f42f8fa93cc05c0e9301f63eaa321ba2779eda3425be0505680b2f8f9dc5faee6502e11c032c18c58582661c2e20bb05d1e61ba7f1458a554db2e83c06dd6ecaea00ebde873394da5265c60a8afc5f8472ebd2bdc7c153e891fb9e7d5aad6ca65a411ae80742527d94a2489c1182e1afa4ebf862c41014c4aeac3df30586f6ca9647f471f596a58315158bf6f848cf70f89f36d67236aad2aedd9d1ac9c339ae3680eaf57150b2a533280da2cebb6916391aeaa4e0177f392b313b1b3c4b61ca75575f05fd01c7603fffded25b3b7948a1ce8018989ed9d725", 0xe9, 0xffffffffffffff01) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4dc82095a7844c6a2745e1eab571edef78d5074f02306630440"], 0x0, 0x0, 0x0}) 21:51:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8fff) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000280)={0x25, 0x23, 0xc, 0x1d, 0x3, 0x10000, 0x0, 0x62, 0x1}) sendfile(r1, r2, 0x0, 0x8fff) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xfc, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe2087bc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40880c5}, 0x800) 21:51:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xfa, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) r3 = dup(r2) accept4$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2044.682267] binder: 23871:23875 unknown command 159571156 [ 2044.687871] binder: 23871:23875 ioctl c0306201 20000080 returned -22 [ 2044.689901] kauditd_printk_skb: 17 callbacks suppressed [ 2044.689910] audit: type=1804 audit(1577137904.821:9054): pid=23874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2939/bus" dev="sda1" ino=17265 res=1 21:51:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delrule={0x20, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}, 0x20}}, 0x0) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2040000}, 0xc004) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1800c010}, 0x1) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x600, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8015}, 0x20000048) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000001c0)={@broadcast, @local}, 0x3a1) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCADDDLCI(r6, 0x8980, &(0x7f0000000200)={'vlan0\x00', 0x400}) [ 2044.768544] binder: 23876:23878 unknown command 399599057 [ 2044.792694] binder: 23876:23878 ioctl c0306201 20000200 returned -22 [ 2044.795328] audit: type=1804 audit(1577137904.881:9055): pid=23877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2939/bus" dev="sda1" ino=17265 res=1 [ 2044.866822] audit: type=1804 audit(1577137904.881:9056): pid=23874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2939/bus" dev="sda1" ino=17265 res=1 [ 2044.928507] audit: type=1804 audit(1577137905.041:9057): pid=23880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2939/bus" dev="sda1" ino=17265 res=1 [ 2044.961748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23885 comm=syz-executor.5 [ 2045.000475] audit: type=1804 audit(1577137905.041:9058): pid=23880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2939/bus" dev="sda1" ino=17265 res=1 [ 2045.058755] audit: type=1804 audit(1577137905.041:9059): pid=23877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir302759160/syzkaller.VqCVTB/2939/bus" dev="sda1" ino=17265 res=1 21:51:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x93872f499065bd43, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_PROTOCOL={0x8, 0x8, 0xffffa888}]}}}]}, 0xffbc}}, 0x0) [ 2045.138809] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="3e260f090f20e0350000d7a502000200e0260f205bf78d7132713279e6c3c685030000440f20c0350f000000440f22c0b949090000f3e1000fae44ee08", 0x3d}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd2(0x0, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000040)={0x1, 0x8, 0x4, 0x1, 0x8000, {0x0, 0x7530}, {0x1, 0xec15d6897ec10959, 0x2, 0x74, 0x1, 0x1, "205b47a8"}, 0x7ff, 0x1, @userptr=0x1, 0x4, 0x0, 0xffffffffffffffff}) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000001800)) 21:51:45 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x5, 0x6065bffb7bf62835) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06630440685e28dac3471e745f8dd96a474cf08870a528c754e567289ffbafd7dce4efb762b2ed7f61e9a2d17c48d0dc05b8f2f4a77b929d112a6967a9e6b64b0469a347c3791c96241ca0b4091f6534081ed0e0d026"], 0x0, 0x0, 0x0}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000280)={0x3, 0x14, 0xfa00, {{0x6000000, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r8}}, 0x48) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r8, 0x7, "67b869", "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"}}, 0x110) 21:51:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@int=0x9, 0x4) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept4$x25(r2, &(0x7f0000000100), &(0x7f0000000140)=0x12, 0x1000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x2a, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630434ab3502dae8dec8128b4747d35840d9e5d84bd8d0d5d0ead08f3b84143f2a66a4f3f864e82434"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c400000000000000000000000b1c3f031b1190c2b0011634840000000000000000000000079ed00000000000000000000000000000000ddc05d0000100000000000000000000000008000000000000000000200000000000000000000e800000000000000"], 0x0, 0x0, 0x0}) [ 2045.643643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19780 sclass=netlink_route_socket pig=23884 comm=syz-executor.5 21:51:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x1441c2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @remote}, 0xfffffffffffffdca) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x6000}) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0xd2b67647239cc58) 21:51:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="48b26400"], 0x0, 0x0, 0x0}) [ 2045.776605] binder: 23904:23908 unknown command -1322127165 [ 2045.813481] binder: 23904:23908 ioctl c0306201 200003c0 returned -22 21:51:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = request_key(&(0x7f0000000040)='.dead\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='bdev\x00', 0xfffffffffffffffa) keyctl$clear(0x7, r4) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) [ 2045.868145] binder: 23910:23913 unknown command 6599240 [ 2045.877506] binder: 23910:23913 ioctl c0306201 20000080 returned -22 21:51:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) bind$isdn_base(r6, &(0x7f0000000180)={0x22, 0x2, 0xaa, 0x5, 0x8}, 0x6) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$KDMKTONE(r5, 0x4b30, 0x9) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0xa00, 0x0) openat$cgroup_ro(r7, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) ioctl$SNDCTL_DSP_GETCAPS(r3, 0x8004500f, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @remote}, 0xc) arch_prctl$ARCH_GET_CPUID(0x1011) setsockopt$inet_msfilter(r4, 0x0, 0x15, 0x0, 0x0) [ 2046.128982] audit: type=1804 audit(1577137906.261:9060): pid=23923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir593238974/syzkaller.IePVN6/1855/bus" dev="sda1" ino=17330 res=1 21:51:46 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@int=0x9, 0x4) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) [ 2046.223276] audit: type=1804 audit(1577137906.321:9061): pid=23924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir593238974/syzkaller.IePVN6/1855/bus" dev="sda1" ino=17330 res=1 21:51:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) syz_open_pts(0xffffffffffffffff, 0x400000) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/relabel\x00', 0x2, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x10000, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000200)=ANY=[@ANYBLOB="0000dd005be5d050106f4c06e26eb2eb01e5a57a9f903cce759b5d933ca8a92c98bc62509bb1bb35d84178360a18520008b71b23b3b3a70d359b3aaac09bb34a61a062bef4163dbd2d12d272efce1f29e2b592ecb4a470746683f7603f01a72bd5c1dd6d9c5325a8d6f3c0bc3739080690484b2ff79c6e6419c5aa8c48cb441db32ba9400490c79984e6ed5b45f110ddfb03b9225ebbaf178cd800f56df4cd26da7d177b630f601a6a1bb84afcfe47ccd4d4529043012f36e27af74bb4ff7e74e8f37d65e2373fe7c628f202e4145d8cb6ecbe6e118a50741643e0f7175e9114ea"]) r4 = socket$inet(0x2, 0x3, 0xa0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) write$P9_RMKNOD(r5, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x50, 0x2}}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x5, @ipv4={[], [], @local}, 0xffffff81}], 0x1c) getsockopt(r0, 0x7ff, 0x802, &(0x7f0000000080)=""/39, &(0x7f0000000180)=0xffffffffffffff58) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x15, 0x0, 0x0) 21:51:46 executing program 2: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f3) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000480), &(0x7f0000000600)=0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)}], 0x1}}], 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000300)={0x7f, 0x0, 0x4}) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000240)={'filter\x00', 0x0, 0x4, 0xfffffffffffffd92, [], 0xc580cff1763a3b2f, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000004c0)=""/178}, &(0x7f0000000340)=0x21) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000003c0)=0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES64=r1], 0x1}, 0x1, 0x0, 0x0, 0x2840}, 0x56031f80c216e470) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/btrfs-control\x00', 0x92f50b46385d8dd, 0x0) ioctl$KVM_GET_PIT(r6, 0xc048ae65, &(0x7f0000000580)) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0x7, r4, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) write$cgroup_type(r7, &(0x7f0000000200)='\x00\x00\x00\x00\x01\x00', 0x20f) getresuid(&(0x7f0000004180), 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="2900cf0004000000000000000000000001000000730e00000000000000000480010000"], 0x29) 21:51:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000100)='./bus\x00', 0x1e3a5a1c64b23d3a, 0x40) sendfile(r2, r3, 0x0, 0x8fff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x1) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 2046.555442] binder: 23904:23941 unknown command -1322127165 [ 2046.561562] binder: 23904:23941 ioctl c0306201 200003c0 returned -22 21:51:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 21:51:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="934e052cf3eacf20069e5c0e630c40000000000000000000000000066304400000000011634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029deed0000"], 0x0, 0x0, 0x0}) 21:51:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) getsockname$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PPPIOCCONNECT(r7, 0x4004743a, &(0x7f00000000c0)=0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630010"], 0x0, 0x0, 0x0}) [ 2046.894419] binder: 23952:23954 unknown command 738545299 [ 2046.904162] binder: 23952:23954 ioctl c0306201 200003c0 returned -22 21:51:47 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x10000, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000080)={'nr0\x00', 0x2, 0xce4}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000180)=0x1, 0x4) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f00000001c0)={0x8, 0x2, 0x3, 0x64}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$can_raw(0x1d, 0x3, 0x1) [ 2047.009093] binder: 23953:23961 unknown command 268460806 [ 2047.017239] audit: type=1804 audit(1577137907.151:9062): pid=23960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir509740448/syzkaller.yA8vW3/1224/bus" dev="sda1" ino=17362 res=1 [ 2047.019046] binder: 23953:23961 ioctl c0306201 20000080 returned -22 21:51:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x15, 0x0, 0x0) [ 2047.167012] audit: type=1804 audit(1577137907.301:9063): pid=23962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir509740448/syzkaller.yA8vW3/1224/bus" dev="sda1" ino=17362 res=1 [ 2047.196239] binder: 23959:23962 unknown command 0 [ 2047.207076] binder: 23959:23962 ioctl c0306201 200002c0 returned -22 21:51:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0xd7d}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000000)={0x5, 0x3, 0xfff, 0x0, 'syz0\x00', 0x4}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x4100, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) 21:51:47 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x208001, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x2, 0x0) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000180)={0x0, 0x1f}, 0x2) r5 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f0000000080)={0x5, 0x3fffff, "d6702a967e68aba043f151686feadca4f55553ab9b86cef7", {0x8, 0x95ca}, 0x3}) 21:51:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0xab6ee8a375e59f73) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x12, r3, 0x2086c83d) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8fff) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="056304706440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06637b40"], 0x0, 0x0, 0x0}) 21:51:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x10, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040)) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000080)) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) [ 2047.783437] binder: 23983:23985 unknown command 1879335685 [ 2047.827140] binder: 23983:23985 ioctl c0306201 20000200 returned -22 [ 2047.840849] binder: 23983:23987 unknown command 1081828102 [ 2047.852145] binder: 23983:23987 ioctl c0306201 20000080 returned -22 21:51:48 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740)='/dev/bsg\x00', 0x0, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8fff) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000780)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000007c0)={r3, 0x2}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) kexec_load(0x6, 0x8, &(0x7f0000000640)=[{&(0x7f00000000c0)="534a33c40e0fd9f36bad2f016f83de1144e35019db747164f05b1c926db9098877e5dcb02aee78395ebb140fc9bae7f800252d460e091a1ddd2b605362674d0d1569d7954c83a698c976688404d9523b178c217c9ede707604bf5ea04efbd850342036ba969cfcd90567a8de2e355658ca3382d07a1e78ad267aa8ec7210094c21f62d895fa2aa0621b80acaddb56026c9e6e4a96685cd774f7c5fca591a052060feb5d0165ffa0374a43b854a8206dfb9140a9c00f9e16e97be24e1075df006c7dee8784ae8ca67dbadd44f8142754f8d95b8b2318d7cfbc05312596dca8d8970ed70288dbfb47451c034fc15c456c9359b5263", 0xf4, 0x3f, 0x81}, {&(0x7f00000001c0)="f1d2a8f7486f4e3725159fec82fcb1dd59128f43a66779ba92a265c1cab472f7322454400bb0ad49d66d4ef8cd1b779004e1de8c4e09b347ecc1349e39", 0x3d, 0x0, 0x3}, {&(0x7f0000000340)="453eb26d610a057c3fa3f471f3aafefd3c739a93b975be2cc12f51ce2f08c3a6863896e913955fde31a93b1d1ca1bdfb8d802f4bee0baebc98ca823d507fa1d3589e95b99e00d61317e6a58e1e5f172d699be6d54d07e3897d1539e6430fb9d8e245f0b3b7d6fa1fe99af3f2a01bf3dcd5f10e78809372245e3c395068fe1700c71c437169971864de00bc96321b3cef07d7d1065e150e64e24fa0cd964daa1346088ca255d1581d4b6419dc219cb57fe8da156aa87895e940b407d19d13aec3e00a153dff6038235924b62aad60bbb53cfb0802b895b74813560020edd8ab6c3c5af90fa0c4819e1409a4a660", 0xed, 0x8, 0x10000}, {&(0x7f0000000240)="a815984de3dc3e4e85825b2ad8e04068459b9aea0a9bf49eb0a6c1ac3dc98a4f7ce8dca1daff6cc052abd89dc6d80736a0b5bf8b25561340421e61f9710f081f22747bd8b6ccc54768284b1439f4cba1e59f", 0x52, 0x80000001, 0x4}, {&(0x7f0000000440)="9b8d3d5795c89b3143ed22ecda295f285b85afea026d5a27de1d41e7d70db5b58697ccf808c4d20b0b476643b416429e7db5e776e2a70373d7268f9360c5a1c381aac3b7ea2507cdbc38f8d044fab8ca671c171c13ad756d600eac0354872833", 0x60, 0x5d, 0x6}, {&(0x7f00000004c0)="8232ea399576685b3790cb3efb1b04dd48b16e41ee1d055a340a377e70578f4d4d6979a0d2fce041eb05d907e783808d34a92bd4be19f820df4483bb2ebef4f85a9acc37fb9e2bdd58220615631c360c67cab2e9608e0be92130b0948a32a2738996db1a93224f555b6ca2d2811d604b94f8fc5b76ac666cd4fcc361380f3ad88a76f1e7ac707d2e20a28ef9e6a2731dc1d1d2bc321a98a7692533e82d4dadd483170f550c81e85692040fccd6a698ab06eb8e792ab4b8aea8f492bdc8", 0xbd, 0x1f, 0x5}, {&(0x7f0000000580)="523b573672f171af0d20ba056618b6ffa20891c5906a74dd88690fc923cf178fa2b39285ffb4ce77ce034e5f27d5ec90ba5d13c583fd7370c3269dff3844a2ad2cd8e4618996e1e16e248afe747f5bfead", 0x51, 0x1, 0x9}, {&(0x7f0000000600)="38424a3ce20885cf6d9eb12fb91a6d68498b54310e66a93d54d8aa800d45b0dfb6", 0x21, 0x586d6a05, 0x7}], 0x30000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:48 executing program 5: syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x7f, 0x101000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8fff) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000100)) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8fff) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000040)="df67025fb36b9d55fc50b6b319903362fd56b6a0210bb7f3b6dcb13976ec1ca4c9ca08c6b360630e78ae87bd0e4d8e0ffed9f53bf729579911b72b9201ab3d0849f94559ce1fdaed8a2c6d62334425e4501f151986afa54c645e130db63fe2beeddcf43f580fa1dd7904998ff9b9f40943c6d5cf71b83d7f347c5614a45e6ce42df243904430cdad3f16c1489c7f50315f7d9f0188274532baf8e1fa95c59275deaab17d871790db14b76ca1157ebf8d27223b0d46b518d5f797d3ea256653fe") connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000280)={0xa20000, 0x5fe, 0x101, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x9b090f, 0x0, [], @p_u16=&(0x7f00000001c0)=0x1}}) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000400)={r2, 0x0, 0x101, "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"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8fff) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x11b, 0x0, 0x0}) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7a452ea77e19d5a330619d9d8ec7cd84ecda82c5b6f84a966fc5f88f374ba909dd1be966ad8d8f7068afb1c5213eade340af139c1e485efc77e2a9db0f09e44f58eb26fc4bb050f8ad9557"], 0x0, 0x0, 0x0}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x110040, 0x0) mq_getsetattr(r3, &(0x7f0000000180)={0x1000, 0x0, 0x7, 0x1000}, &(0x7f00000001c0)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$IMHOLD_L1(r7, 0x80044948, &(0x7f0000000140)=0x553e2566) 21:51:48 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000040)={0x4000, 0x5000, 0x9, 0x7fffffff, 0x8}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x462082, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)={&(0x7f00000002c0)='./bus\x00', r4}, 0x10) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000001c0)={r6, 0x7, 0x8000}, 0x173) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = signalfd(r3, &(0x7f0000000400)={0x5}, 0x8) sendfile(r7, r8, 0x0, 0x9) [ 2048.356334] binder: 24007:24009 ioctl c0306201 20000200 returned -14 [ 2048.443141] binder: 24007:24013 unknown command -1490139782 [ 2048.456610] binder: 24007:24013 ioctl c0306201 20000080 returned -22 21:51:52 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) semop(0x0, &(0x7f0000000500)=[{0x0, 0x6}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:51:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = getpgrp(r2) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0xfff, &(0x7f0000000280)=""/176) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x7fffffff, 0x200) r4 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) r6 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0x323) r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r8 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0x323) r9 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x8fff) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f00000000c0)={0x6, r9}) sendfile(r10, r7, 0x0, 0x7d) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000000040)={0x0, @empty, 0x4e21, 0x0, 'sh\x00', 0x8, 0x40000000, 0x4e}, 0x2c) setsockopt$inet_msfilter(r4, 0x0, 0x15, 0x0, 0x0) 21:51:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0xffffffffffffff20, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:52 executing program 0: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)={@rand_addr=0x6, @dev={0xac, 0x14, 0x14, 0xb}, 0x99d9f7eb6879b8b3, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x14) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x40, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=0x0, @ANYRESOCT=r3], 0x0, 0x0, 0x0}) [ 2052.265545] binder: 24025:24027 ioctl c0306201 20000200 returned -14 21:51:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) setsockopt$inet_dccp_int(r4, 0x21, 0x3, &(0x7f0000000040)=0x8, 0x4) 21:51:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$rxrpc(0x21, 0x2, 0xa) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x2, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16], 0xfffffebf, 0x0, 0x0}) [ 2052.324611] binder: 24026:24032 unknown command 808482864 [ 2052.356984] binder: 24026:24032 ioctl c0306201 200003c0 returned -22 [ 2052.439699] binder: 24038:24039 unknown command 65535 [ 2052.457577] binder: 24038:24039 ioctl c0306201 20000080 returned -22 21:51:52 executing program 2: creat(&(0x7f0000000080)='./file0\x00', 0x180) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000003c0)=0x8010) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) fcntl$setflags(r0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = dup3(r1, r2, 0x80000) ioctl$TIOCGPTPEER(r3, 0x5441, 0x4f0) write(r0, &(0x7f0000000340), 0x41395527) syz_mount_image$bfs(&(0x7f0000000100)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0x1be15a22877fbba1, 0x80}], 0x81, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1000, 0x0) 21:51:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000480)='trusted.overlay.redirect\x00', &(0x7f00000004c0)='./file0\x00', 0x8, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x3) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000f2fa4fe9d2b526e1e941e2e1ccf6f3a111aac2f31467d73e470e351373401bac9755ab81eefe1d389480393c51f6b830922ea1b3631194edb8061a0c3c0f767aff280e3f61c2e7490bf1da6621304e3b111e95cf4179005dd20bc7e0f3fa73c57899b7b5ca04022c1ad0f162b9dc288008f00ce5bf5c82134b7f3247115435a02736e2867f6bf5c879ae48f72fce2a700c035465f6fc87ea3"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x406}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000ac1167700ddacbde32ac7a1a155263420000c9dc03f6b64c0b", @ANYRES16=r5, @ANYBLOB="08002abd7000fedbdf25010000000800040000000000080002000200000008000a004e20000008000a004e210000"], 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x4) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304424e33dfbc3c8c4395f6b2de7383fc86b419bd91b41fcdaaa5a95892055e35a21f0a40552f776d6ab6ec3214046f1590ff697d0cbbea60e19a34d385b162a26070e60a11d1cf666be93d7b99f92d5850b9e3dbb7"], 0x0, 0x0, 0x0}) 21:51:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x80, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x3, 0xa0) r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8fff) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0xffffffffffffffe3) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x14080, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @local}}, 0x7, 0x3}, 0xff72) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x15, 0x0, 0x0) [ 2052.582239] binder: 24048:24049 unknown command 0 [ 2052.593705] binder: 24048:24049 ioctl c0306201 20000200 returned -22 [ 2052.635401] binder: 24048:24049 unknown command 1107583748 [ 2052.646896] binder: 24048:24049 ioctl c0306201 20000080 returned -22 21:51:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x400000, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) [ 2052.692921] kauditd_printk_skb: 11 callbacks suppressed [ 2052.692930] audit: type=1804 audit(1577137912.831:9075): pid=24055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir593238974/syzkaller.IePVN6/1865/bus" dev="sda1" ino=17412 res=1 [ 2053.060928] binder: 24026:24032 unknown command 808482864 [ 2053.067967] binder: 24026:24032 ioctl c0306201 200003c0 returned -22 21:51:53 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40400, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x2, 0xa, 0x4, 0x0, 0x4a, {0x77359400}, {0x2, 0x8, 0x47, 0x9, 0x5, 0x81, "0a20a33e"}, 0x41, 0x4, @userptr=0x6, 0x3f, 0x0, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) getsockopt$rose(r3, 0x104, 0x1, &(0x7f0000000100), &(0x7f00000001c0)=0x4) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8fff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], 0x2e6, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) [ 2053.154654] QAT: Invalid ioctl [ 2053.158457] QAT: Invalid ioctl [ 2053.168985] audit: type=1804 audit(1577137913.301:9076): pid=24065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir509740448/syzkaller.yA8vW3/1228/bus" dev="sda1" ino=17413 res=1 [ 2053.297835] audit: type=1804 audit(1577137913.431:9077): pid=24065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir509740448/syzkaller.yA8vW3/1228/bus" dev="sda1" ino=17413 res=1 [ 2053.297864] QAT: Invalid ioctl 21:51:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2f42f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) sendto$inet(r0, &(0x7f00000001c0)="4ee451bc012272d621e4aab6ea05cbee39fa510e77e926d30f98485a3676de7d8b13ffac671d16651a6e860a779f4c42714b9f8feb9b8cab8264d275df8a1e4787f7773dfa51f4d8b8ff8b03d7e3cb9670d99cc1930724a28ce187fc19afd8bc718ff183d95500c6e19a1a22652712cb6d9754ba6e94776524c65566de54", 0xfffffef1, 0x240, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = gettid() r4 = creat(&(0x7f0000000280)='./file0\x00', 0x28) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='#! ./file0 -'], 0xc) prctl$PR_SET_PTRACER(0x59616d61, r3) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) fchmod(r8, 0x100) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) close(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) 21:51:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000080)) [ 2053.424306] audit: type=1804 audit(1577137913.561:9078): pid=24055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir593238974/syzkaller.IePVN6/1865/bus" dev="sda1" ino=17412 res=1 21:51:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400040, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000080)={0x9, [0x5354, 0x200, 0x800, 0x8000, 0x7, 0x400, 0x0, 0x6, 0x53, 0x8, 0x0, 0x1ff, 0xf489, 0xe7e5, 0x3, 0x2, 0x5, 0x3, 0xfffb, 0xfff7, 0x8, 0x7, 0xfff7, 0xc6, 0x8, 0xb98e, 0x4, 0x0, 0x1, 0x41ec, 0x87b, 0x0, 0xff, 0x0, 0x58f, 0x4, 0x6, 0x7, 0x6, 0x5, 0x7b70, 0x5, 0x2, 0x85, 0x9, 0x101, 0x4, 0xca], 0x1}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x15, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000200)={{0x621c4969c81f7032, @remote, 0x4e22, 0x1, 'dh\x00', 0x7, 0xfff, 0x32}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x4, 0x8, 0x1, 0x6}}, 0x44) 21:51:53 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5aa9e91) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="056b0440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r6 = dup2(0xffffffffffffffff, r1) r7 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) ioctl$KDGKBMODE(r6, 0x4b44, &(0x7f0000000280)) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0x323) r8 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x8fff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r10, 0x805}, 0x30}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x5002900}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r10, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) fsetxattr$security_selinux(r3, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:pam_console_exec_t:s0\x00', 0x28, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2053.713323] binder: 24078:24082 unknown command 1074031365 [ 2053.733379] binder: 24078:24082 ioctl c0306201 20000200 returned -22 [ 2053.772154] audit: type=1804 audit(1577137913.911:9079): pid=24085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir509740448/syzkaller.yA8vW3/1230/bus" dev="sda1" ino=17407 res=1 [ 2053.857799] audit: type=1804 audit(1577137913.941:9080): pid=24086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir423096274/syzkaller.0IKwTW/1001/bus" dev="sda1" ino=17413 res=1 21:51:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000040)=0x10001, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2053.976124] audit: type=1804 audit(1577137914.091:9081): pid=24088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir509740448/syzkaller.yA8vW3/1230/bus" dev="sda1" ino=17407 res=1 21:51:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8fff) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f00000000c0)=0x2) [ 2054.108090] audit: type=1804 audit(1577137914.241:9082): pid=24096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir423096274/syzkaller.0IKwTW/1002/bus" dev="sda1" ino=17407 res=1 [ 2054.176467] audit: type=1804 audit(1577137914.281:9083): pid=24098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir509740448/syzkaller.yA8vW3/1231/bus" dev="sda1" ino=17413 res=1 [ 2054.209596] EXT4-fs warning (device sda1): ext4_group_extend:1741: can't shrink FS - resize aborted [ 2054.276618] audit: type=1804 audit(1577137914.411:9084): pid=24098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir509740448/syzkaller.yA8vW3/1231/bus" dev="sda1" ino=17413 res=1 21:51:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x238, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xee}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc374}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0x7c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x40, @empty, 0x2b71}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x400, @mcast2, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'lapb0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x679f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa25d}]}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4442}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x431}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x238}}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) signalfd4(r3, &(0x7f0000000140)={0x4}, 0x8, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c40000000000000000000000000066304400000000011634840000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000111340282b448dd1f8644f13f060af4bdc264d536ba60796c46b9e05f171e83fc3729f06aed4ccb04f6f3ddd672bb07cece821b2983ea09cf17f6f2db5e2c906383277ce1932af1f8e71bd409c74f1f5c70de5edcd69d3bd1c54ddbbf5ec945395ff13575986084e4bdcf464ef1ae94a7516f0cc53bffa1ce150dc0d"], 0x0, 0x0, 0x0}) 21:51:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) r5 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000000c0)={0x5, 0x3b639b01, 0xfffffff8, 0x7, 0x101, 0x7}) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x8fff) r7 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x6, 0x400) sendfile(r2, r7, 0x0, 0x8fff) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40042409, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x7, 0xa, r3, 0x0, &(0x7f0000000280)={0x990a75, 0x10000, [], @ptr=0x3}}) fsetxattr$security_capability(r9, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2={0x2000000, [{0x699e}, {0x7f, 0xfffffffc}]}, 0x14, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2080, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x1, @remote}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x15, 0x0, 0x0) 21:51:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) r4 = shmget(0x0, 0x2000, 0x8, &(0x7f0000d15000/0x2000)=nil) shmat(r4, &(0x7f0000ff9000/0x4000)=nil, 0x2000) shmctl$SHM_UNLOCK(r4, 0xc) 21:51:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:56 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000400)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe5f8440516fa1284}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff3b}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x05\x00', 0x4001}) open$dir(0x0, 0x0, 0x11) 21:51:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="21947c5b"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:56 executing program 1: r0 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x323) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8fff) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, {0x20, 0x0, 0x3f, 0x7f, 0x5, 0x7f}}, 0x8) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000140)=""/22, &(0x7f0000000180)=0x16) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000000)) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setns(0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) io_setup(0x9, &(0x7f0000000400)=0x0) io_getevents(r8, 0x2, 0x2, &(0x7f00000015c0)=[{}, {}], &(0x7f00000000c0)={0x0, 0x989680}) r9 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0x323) r10 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x8fff) io_cancel(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x7, r10, &(0x7f0000000380)="978e9f397f33b94b66a507659bb3c91c196745c6ffbf91c1b8106e9feee7fb3e5c0457f957b81d66c5f01776bd8c88f1835b734e32a6f2f8056a50def8e4692a79b7c7c7a8c20d95ee340b7e482b2d2e5c4fbe4c2e384f8c28456e0c1c63e63a68495010f0fa64076c572bb7129c52ad2b744e2ce5a499406e2283d75bb6f213237a91ff1ff1ba5a60dc878a668ae2789b35c163db6728126b623a02d852667be6fac822f6057c9cdf2c6a2027273fcb8e02b89567024fcf7106ae95c8f9659b8b94d4597873da7ee863bb339f28306c6aeb6a808ccb6ad8e25b707a5e18d3b5702bfb8a904ff42cb2d99666a36afae18d23", 0xf2, 0x9, 0x0, 0x5}, &(0x7f0000000280)) dup2(0xffffffffffffffff, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 2056.799597] binder: 24126:24129 unknown command 1534891041 [ 2056.826194] binder: 24126:24129 ioctl c0306201 20000200 returned -22 21:51:57 executing program 2: ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=""/129, 0x5e}) clone(0x28b84900, 0x0, 0x0, 0x0, &(0x7f0000000300)) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) [ 2056.941609] binder: 24128:24130 unknown command 0 21:51:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x58, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0963104001000000000000000000000000000000066304400000000011634840000000000095abe6b5968895604020a23933247b00"/104], 0x0, 0x0, 0x0}) [ 2056.963246] binder: 24128:24130 ioctl c0306201 20000080 returned -22 21:51:57 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}}, 0x1c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) sendmsg$unix(r1, &(0x7f0000000b80)={&(0x7f0000000100)=@abs, 0x6e, 0x0}, 0x20008000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 21:51:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() r1 = dup(r0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ppoll(&(0x7f0000000280)=[{r4, 0x8000}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000300)={0x8000}, 0x8) setitimer(0x5, &(0x7f0000000080)={{0x77359400}, {r2, r3/1000+10000}}, &(0x7f00000000c0)) r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8fff) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000480)={0x5, 0x20}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r7 = accept$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f0000000200)={{0xa, 0x4e21, 0xfff, @dev={0xfe, 0x80, [], 0x22}, 0x7fffffff}, {0xa, 0x4e21, 0xf5, @dev={0xfe, 0x80, [], 0x28}, 0x4}, 0x8, [0xe4e4, 0x100, 0x1000000, 0x3, 0x7, 0x3, 0xc6c, 0x3]}, 0x5c) r8 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r8, &(0x7f0000000000)={0x2, 0xfffc, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x3200, 0x0) r11 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r11, &(0x7f0000000000)=ANY=[], 0x323) r12 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r11, r12, 0x0, 0x8fff) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ppoll(&(0x7f0000000380)=[{r10, 0x20}, {r11, 0x100}, {r7, 0x10}, {0xffffffffffffffff, 0x20}, {r4, 0x4000}], 0x5, &(0x7f0000000400)={r13, r14+10000000}, &(0x7f0000000440)={0xffffffff}, 0x8) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f00000001c0)={@empty, @empty}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x15, 0x0, 0x0) 21:51:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair(0x4, 0xa, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x9, "c23f5d1bcd5b19430b"}, &(0x7f00000000c0)=0x2d) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f00000000c0)='$\x00', 0x2) read(r5, &(0x7f0000000100)=""/85, 0x55) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 21:51:57 executing program 2: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ptrace(0xffffffffffffffff, 0x0) getpid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) signalfd4(r0, &(0x7f00000002c0), 0x8, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pivot_root(&(0x7f0000000540)='./file0\x00', &(0x7f0000000080)='./file0\x00') write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x1}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00\x00\xe3\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000000340)='net/dev_mcast\x00\xc0\x87\xeaU\x01\x1e\x14\xc9\xe3G\xdd\x1fU\xa6\x02j\x1c\xb7\xe0g\xf3\xc5w\x98\x1cI\x94\xa1\xe8\r\x90\xd4\x9dh\xbd\xbc\x91\xfa\xb9\xc1\xc7\xf0c\xe6v\xe80x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="2000000011000d0467e337020000000001000000", @ANYRES32=r7, @ANYBLOB="ffffffffffffd79b7df931c82197c9500611dc6d71d91049b06a7e76dfda415770f18ad6965ef5417e5a4ffe4b07995242856b006f154e1090674906347da586ef3ea764e57e103a54aaf189791a4bbf23c2e96b7ff44eea53dc6bcadb2b2244f45887ea63312181a5e0e2ccce6800000000000000"], 0x20}}, 0x0) [ 2057.258107] binder: 24162:24163 unknown command 0 [ 2057.280358] binder: 24162:24163 ioctl c0306201 20000080 returned -22 21:51:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r8, 0x0, 0x8}, 0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r8, 0x800, 0x800}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000300)={r8, 0x0, 0x3f, "0286cee2ab1d946ee10ad2b66ff62f386551daefb908f073b76b53ea4e4e31e98f00bfe7d875ac88ce6e60824ce0aaf5e6684e7a67af98291a4547fe69e822"}, 0x47) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000100)={r8, 0x4}, &(0x7f0000000140)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73043fe1"], 0x0, 0x0, 0x0}) [ 2057.440110] protocol 88fb is buggy, dev hsr_slave_0 [ 2057.445268] protocol 88fb is buggy, dev hsr_slave_1 [ 2057.450468] protocol 88fb is buggy, dev hsr_slave_0 [ 2057.455566] protocol 88fb is buggy, dev hsr_slave_1 [ 2057.460739] protocol 88fb is buggy, dev hsr_slave_0 [ 2057.465816] protocol 88fb is buggy, dev hsr_slave_1 21:51:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r3 = accept$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x12, &(0x7f00000001c0)={@loopback, @local, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000140)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, @ipv4={[], [], @rand_addr=0xfb}, 0x4, 0x10, 0x1, 0x400, 0xfffffffffffffff8, 0x100200, r4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:51:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2057.613197] binder: 24176:24183 unknown command -515963789 [ 2057.635471] binder: 24176:24183 ioctl c0306201 20000080 returned -22 21:51:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8fff) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x2000030, &(0x7f0000000400)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r4}}, {@msize={'msize', 0x3d, 0xfffffffffffffbff}}, {@version_u='version=9p2000.u'}, {@posixacl='posixacl'}, {@version_L='version=9p2000.L'}], [{@fsuuid={'fsuuid', 0x3d, {[0x5a, 0x66, 0x65, 0x30, 0x36, 0x0, 0x61, 0x51], 0x2d, [0x32, 0x62, 0x34, 0x65], 0x2d, [0x31, 0x38, 0x55, 0x64], 0x2d, [0x31, 0x39, 0x66, 0x71], 0x2d, [0x2e, 0x66, 0x62, 0x30, 0x37, 0x65, 0x31, 0x30]}}}, {@appraise='appraise'}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x62, 0x66, 0x39, 0x531354b4535f410e, 0x33, 0x63, 0x63], 0x2d, [0x62, 0x66, 0x65], 0x2d, [0xdc32ad195d529a59, 0xead4d1b7a21c2cac], 0x2d, [0x36, 0x34, 0xe7, 0x61], 0x2d, [0x32, 0x62, 0x36, 0x36, 0x61, 0x39, 0x64, 0x66]}}}, {@subj_user={'subj_user', 0x3d, '^*md5sum.user:mime_typeppp1useruservmnet0mime_type'}}, {@smackfsroot={'smackfsroot', 0x3d, ']cpusetselinux)\\cgroupuser'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x61, 0x34, 0x30, 0x63, 0x39, 0xcea171a3b68e3203, 0x64], 0x2d, [0x6, 0x2f, 0x33, 0x35], 0x2d, [0x62, 0x65, 0x34, 0x35], 0x2d, [0x33, 0x37, 0x63, 0x37], 0x2d, [0x63, 0x51b65569790d301a, 0xd506361a1598244e, 0x64, 0x39, 0x62, 0x35, 0x64]}}}, {@dont_hash='dont_hash'}, {@subj_type={'subj_type', 0x3d, 'wlan0'}}]}}) 21:51:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x2b7) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, &(0x7f0000000340)={0x0, &(0x7f0000000a80)=[&(0x7f00000003c0)="299b4dc6570ac2254ec4c0e97184fa3150081241d91119d7e49d77818c8fc25463101becbad7f5362f04354b0337be47b047afb0e35c41e5dfda00701fc68cacc1fe9d742bfcfb1886f63c13a1ac", &(0x7f0000000b00)="583bbe46842de3a2da1028b738cb762242f7cc0060a4d89e903569bf5287e4152c9172e5538b77a2c66f40a2a6fd03baf9ac025a50adff03d22d0f9bc0fd6e4f1b370234ca6a3ea3543618e7fa1da8f1fb151ed0f5d80b09f9765c3b3605211c4562e229b36caf7ac14554633c2701d94c4a0cbfcba0fc6a6110280c8e91d3be908049f1b9c6cfdbe57803983d802ccf7572c02eb908b67b2155a1418c1c2f0ed4bde66dcfdf42105c00000000000000", &(0x7f0000000500)="492989a86a875548a20d6745b16f5edcb406250102637f35cf9f2b143a44e445b1b26e336de2989f34869d1e5ad7fe4fb2e6fdab66ba2474045b96e09dc2b0adb2666dabc5450b27357612defbff5f6c3c7a5b41a92eef62a1e3cc20aede7c876ee3486a3af497ecdc684e3ce4218b46863192f8b41d47646db92c02d0907cf159b94588399e8e6bbdc621a40f82684040b1bb996c6528b36b5632425f03e340a40fbc0d2f263ec84cd012d4e9610c2ca01ad8ee07b9add216774e223e63def89c87b464647d729dd989e4648e53bf116ec27d6beb7672db9b23847b31b8", &(0x7f0000000600)="29132b1f8069af3ce703d5f4de18b240cdccf30ddacf0378eee64c3b893761bbc469812da81205e52c61dd07ee60785752de0cc6878b4a114200250dba50c115fa6decc7e1ba1dc3351a479c56825a36871bcb87cbd056a6b0358a6c70ba42a2bec8c4132cdbcd199c377bdf79259429662ef93d18b3eba67271622300cd59bb6515a8080138b287efa88d091f6377b8beeb5aab1306b0c3c106c5bd71b04e9ae942ade46ef43d9b9cbe624ed4c83b390900f5391cfad0519ca121152f49f4ed", &(0x7f00000006c0)="0e986123ccf24d6e5500b043f34f67f7cb75aa6cabeeab23fca199d8a3c25ccfba071952aab507838cfeb666dcb1b446d649d1fd157c5053a530fabd1529bb2a6d46c61fdb9ef6b28acc79e83910454a2d534ad3eedf3b3a", &(0x7f0000000740)="355b32c8e211ddcfa70e82e85ca877c03c82d70acc64575c7fb560eda7316afb2044f74e486dd7b098d98a4682fab7300753e9b8fd6c10d373e3931000bfa0efbfda6256913d47f9895f5c2c56e00eb2475fd2cc9c82f99aabac5bad9461b0586ebeb30e9880926055f80eb722d182dc815fe067180c88360851b303e2d1ee64142926f1593c43b33a3761df609dbbc062349795a86808e2f999327d5b24fe817ba1a6b5c63a44433046637b9c21749b856f49445987fdfa02069812fb4dd2881e263bbaa2ec636187d5f92a8f4488e7200a35ba10ec026c86", &(0x7f0000000840)="d81409ef0f1f223aeee465b58ec436215fd60d713b6ed0c3278f95f932760de055b66d0d1df7f51d74706c1c97a401b4259bfa08794f3320cf9bbfafe61f5da526c0876f5dc4373c6e4ad6f5350899c47bfaf17c69e2c2623abee0b24bbc5e05773be582f0316615d87ed6c00f5ae76805dfd752308da755636b0d4b727845a867e0176f6d0cc853fa4494ff7fd70e39b483c129afc19cbfd5200cdd7298f934c5dc2244f27bcdcd2ffac6a5f93d6cfaa03853489a9c45", &(0x7f0000000000)="0d9a59ea6deb4cd157fe6321fd5ca8d544d6fb96d0ad5dd54993abe1d0a0f2deee30eaa2", &(0x7f0000000900)="9deecd56ea84f24d5ac0af82f2ae251b1ab04a40dd129665b6f2132448dbbfe800f5d6810a4ce39f7ee1400723ca3905acdd4429182017740ade35062b6557368f1f025e3e1e28d1c0f1b8c524c47b365666b1006d5fede8e91bd9c8864f24b0c635d3ab3cac03dbd7b4125a9b27e1312476ed4c0e797d13b81bd40bb158ed6aacf5af91929decd08185008de9b2108f43b4cdbb0176b1432cc8a9aeef9621", &(0x7f00000009c0)="0dae63558967403bb559f560a250dea154f2451695b852a013b4dfc5b56b1f7ee16da710e42dadd0a4b7fcdf7b2e7c0c2a97dc34ca3a40cd39888d4e6cba40281323fdf2d62fc01e97f9b617c3cb5a839e5d35ee99dea26fef825743650e0e2db8515ef06921853f4429f95ada97217a702d37529dfed591c80135f690f6097fc57467ce6bd3a96a2c4b85273b5ca3c1570b19a0f54ba861dad939a1265d042e58e6cfcee652b84e0e7c6aa70279aa2aa571a88277b0cfba"]}) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000001c0)={0xa30000, 0x5a, 0x400, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x990a77, 0x5, [], @value64=0x1}}) ioctl$PPPIOCGIDLE(r5, 0x8010743f, &(0x7f0000000240)) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) r7 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:58 executing program 2: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ptrace(0xffffffffffffffff, 0x0) getpid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) signalfd4(r0, &(0x7f00000002c0), 0x8, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pivot_root(&(0x7f0000000540)='./file0\x00', &(0x7f0000000080)='./file0\x00') write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x1}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00\x00\xe3\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000000340)='net/dev_mcast\x00\xc0\x87\xeaU\x01\x1e\x14\xc9\xe3G\xdd\x1fU\xa6\x02j\x1c\xb7\xe0g\xf3\xc5w\x98\x1cI\x94\xa1\xe8\r\x90\xd4\x9dh\xbd\xbc\x91\xfa\xb9\xc1\xc7\xf0c\xe6v\xe80x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="2000000011000d0467e337020000000001000000", @ANYRES32=r7, @ANYBLOB="ffffffffffffd79b7df931c82197c9500611dc6d71d91049b06a7e76dfda415770f18ad6965ef5417e5a4ffe4b07995242856b006f154e1090674906347da586ef3ea764e57e103a54aaf189791a4bbf23c2e96b7ff44eea53dc6bcadb2b2244f45887ea63312181a5e0e2ccce6800000000000000"], 0x20}}, 0x0) [ 2058.579086] kauditd_printk_skb: 10 callbacks suppressed [ 2058.579095] audit: type=1804 audit(1577137918.711:9095): pid=24194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir509740448/syzkaller.yA8vW3/1239/bus" dev="sda1" ino=16483 res=1 21:51:58 executing program 2: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ptrace(0xffffffffffffffff, 0x0) getpid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) signalfd4(r0, &(0x7f00000002c0), 0x8, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pivot_root(&(0x7f0000000540)='./file0\x00', &(0x7f0000000080)='./file0\x00') write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x1}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00\x00\xe3\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000000340)='net/dev_mcast\x00\xc0\x87\xeaU\x01\x1e\x14\xc9\xe3G\xdd\x1fU\xa6\x02j\x1c\xb7\xe0g\xf3\xc5w\x98\x1cI\x94\xa1\xe8\r\x90\xd4\x9dh\xbd\xbc\x91\xfa\xb9\xc1\xc7\xf0c\xe6v\xe80x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="2000000011000d0467e337020000000001000000", @ANYRES32=r7, @ANYBLOB="ffffffffffffd79b7df931c82197c9500611dc6d71d91049b06a7e76dfda415770f18ad6965ef5417e5a4ffe4b07995242856b006f154e1090674906347da586ef3ea764e57e103a54aaf189791a4bbf23c2e96b7ff44eea53dc6bcadb2b2244f45887ea63312181a5e0e2ccce6800000000000000"], 0x20}}, 0x0) 21:51:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="070f0000"], 0x0, 0x0, 0x0}) 21:51:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x3, 0x8) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5, 0x500) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f0000000080)=0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x15, 0x0, 0x0) [ 2058.733745] audit: type=1804 audit(1577137918.861:9096): pid=24200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir509740448/syzkaller.yA8vW3/1239/bus" dev="sda1" ino=16483 res=1 21:51:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f00000000c0)={0x0, 0x0, 0x103, 0x2, {0x20000000, 0x3ff, 0x4, 0x7f}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0400a27e", @ANYRES16=r2, @ANYBLOB="100000000000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x100) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r4, 0x10, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x100) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffefb, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0}) [ 2058.859347] binder: 24206:24208 unknown command 3847 [ 2058.882433] binder: 24206:24208 ioctl c0306201 20000080 returned -22 21:51:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="ff0f0000"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6375177678a2936b920ad7625e4936"], 0x0, 0x0, 0x0}) 21:51:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) r2 = socket$inet(0x2, 0x4, 0xa0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x15, 0x0, 0x0) 21:51:59 executing program 2: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ptrace(0xffffffffffffffff, 0x0) getpid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) signalfd4(r0, &(0x7f00000002c0), 0x8, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pivot_root(&(0x7f0000000540)='./file0\x00', &(0x7f0000000080)='./file0\x00') write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x1}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00\x00\xe3\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000000340)='net/dev_mcast\x00\xc0\x87\xeaU\x01\x1e\x14\xc9\xe3G\xdd\x1fU\xa6\x02j\x1c\xb7\xe0g\xf3\xc5w\x98\x1cI\x94\xa1\xe8\r\x90\xd4\x9dh\xbd\xbc\x91\xfa\xb9\xc1\xc7\xf0c\xe6v\xe80x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="2000000011000d0467e337020000000001000000", @ANYRES32=r7, @ANYBLOB="ffffffffffffd79b7df931c82197c9500611dc6d71d91049b06a7e76dfda415770f18ad6965ef5417e5a4ffe4b07995242856b006f154e1090674906347da586ef3ea764e57e103a54aaf189791a4bbf23c2e96b7ff44eea53dc6bcadb2b2244f45887ea63312181a5e0e2ccce6800000000000000"], 0x20}}, 0x0) [ 2059.093569] binder: 24217:24218 unknown command 4095 [ 2059.098736] binder: 24217:24218 ioctl c0306201 20000200 returned -22 [ 2059.124175] binder: 24217:24218 unknown command 1981248867 [ 2059.129910] binder: 24217:24218 ioctl c0306201 20000080 returned -22 21:51:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) sysinfo(&(0x7f0000000040)=""/52) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000240)=[@request_death, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000340)='fou\x00') sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4008004}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9e000512", @ANYRES16=r3, @ANYBLOB="200026bd7000fcdbdf2502000000080001004e2300000800040002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x120, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20048012) 21:51:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchownat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xee00, r3, 0x400) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000580)={@multicast1, @rand_addr, @local}, &(0x7f00000005c0)=0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r9, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000002500070500000000000000001a0000a6", @ANYRES32=r9, @ANYBLOB="0000ffff0000ffff000000000cb40100677265640000000004000200"], 0x34}}, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local, r9}, 0xc) sendmsg$nl_generic(r8, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0xec, 0x2c, 0x0, 0x70bd25, 0x25dfdbfb, {0x4}, [@typed={0xd8, 0x91, @binary="0df661b19b566d7d418678ff9ebc34cb7b17a2e12860c3f18b5f7c37a420dfe8043deb9ed2c03daed347f5b87c02d89887d990963f21625f940d844a0c39626068968783eb59fb8a1ce99ad197e9ed98343f99925ff1675df04dffc57c186acc140b11337e11a435531b455afbdde3b03a53709d5c021ac281fa7d7d2b34549f5fcad5729af7cf2f55e6db9c7450dc2a5b3ccdd9c1ab293044c18fe0309673c35b54a78f6e599dcc2591bc4dd8da8c7c0efc4572bba5bc59bafb8b5f59e15542402a6be66f4f2606b53c83f71614dc0382fb"}]}, 0xec}, 0x1, 0x0, 0x0, 0x40180}, 0xfaab1f4c229bd63f) setsockopt$inet_msfilter(r4, 0x0, 0x15, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x0) write(r10, &(0x7f0000000340), 0x41395527) ioctl$TIOCSCTTY(r10, 0x540e, 0x6) [ 2059.351136] IPVS: stopping master sync thread 5519 ... [ 2059.407842] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r5 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0xfffffffffffffe6d) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r7, 0x391}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x4, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x80) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:51:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) prctl$PR_SET_FPEMU(0xa, 0xf9452af6032f18b0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05a4c2a9bc8ae66826d4a0d88305c3f6e8979a1e98841b4c00e1c490f544fa53dc6fca882d70a7e697d1913efafdc2a7e05bd1784a195fa87aabcbc49d69aa4a315b8b33a51d56b6a532d019"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000180)={{0x88}, {0x6, 0x3}, 0x4, 0x5, 0x8}) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) [ 2059.747642] binder: 24243:24244 unknown command -1446861819 [ 2059.764720] binder: 24243:24244 ioctl c0306201 20000200 returned -22 [ 2059.801504] binder: 24243:24245 unknown command -1446861819 [ 2059.828572] binder: 24243:24245 ioctl c0306201 20000200 returned -22 [ 2059.878488] device bridge_slave_1 left promiscuous mode [ 2059.903471] bridge0: port 2(bridge_slave_1) entered disabled state 21:52:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0x323) r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8fff) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0x323) r10 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x8fff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r11, 0x407, 0x0) write(r11, &(0x7f0000000340), 0x41395527) r12 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r12, &(0x7f0000000000)=ANY=[], 0x323) r13 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r12, r13, 0x0, 0x8fff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5b, 0x0, &(0x7f0000000580)=ANY=[@ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="53e7e0021cc5fd4b597657e2a80a795f80c3a59a06039eea779073475674e35f4ba87d914e72888c862be85dbe46b3c9346563977ec9e212786ce8bba2b035067ae1c0a8c2a59c011f64590162a5d271b3774647aa6be72b46f009d741415c0d424e64332d4d35b1f199d7908aed758847272807a6ee8064a17557cf69971737513228a9bcd48f816266ca4f52aa5f22709905537330d37d69c5bbce95bc02575370efd824209ddd9c889d115fa0fd132e275a8b32c9057a192c1afb8b12617c61", @ANYRES16=0x0, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="9c9d719b86aec9fe978c8429ea48f417ca0654dc6b4994f4bc08386092066bbf094573c104d1948d87166f38acbdb25447e43b3baa86ff622e0855190481fbb610f9c9d1125917b170e7d7be3415b01a577ba770ceeaa8d06eda6cdc8988e9bbb4720cfd4c22af07715cb6433310527b56ca1060bd9ce1d52ac4315dc25588e97275865f8d1e838011a0922e41ddd69e04688a8754addae3be94301e3991c721c7dcce9f1a0b77f9a30baaa4a1f3ee6ffe31df7b62032ab51e45767f04ba61d9c79309a8a9", @ANYRES64=r5, @ANYRES16, @ANYPTR]], @ANYPTR=&(0x7f0000000440)=ANY=[], @ANYPTR=&(0x7f0000000700)=ANY=[@ANYBLOB="b80823487eaa0a43026afd56a13878a04fc45ee7c540fea31fd8b706af3e3cfd082b9285ab88d9af063f0dc1c1444e44ae6a215d738f08a8aacae9ac8e6a6706309e73a27c774895aa7ee2a9a87c8ae79467615adb43328954713f4ba00c1f2f842ae42974bfbba17851a5f88b6f8e464a5bb737eef3216936dc744b462f2a08d97ffb2bd3bcaac145ddc8dd4821ff51d55b762e88358398343e1645141cc0cc219ef2d2790e78af85f0ec3ed268a650", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR, @ANYRESHEX=r2, @ANYRESOCT], @ANYBLOB="80cbec1723b5fd61de53de05", @ANYRESHEX=r11], @ANYRESDEC, @ANYRES16, @ANYRESOCT, @ANYRESDEC=r13, @ANYRES16=r4], 0x0, 0x0, 0x0}) 21:52:00 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) [ 2060.183447] audit: type=1804 audit(1577137920.321:9097): pid=24256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir423096274/syzkaller.0IKwTW/1014/bus" dev="sda1" ino=17452 res=1 [ 2060.305142] audit: type=1804 audit(1577137920.411:9098): pid=24258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir423096274/syzkaller.0IKwTW/1014/bus" dev="sda1" ino=17452 res=1 21:52:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x325, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) [ 2060.396618] binder: 24249:24256 unknown command 536871744 [ 2060.408413] binder: 24249:24256 ioctl c0306201 20000040 returned -22 [ 2060.422645] audit: type=1804 audit(1577137920.421:9099): pid=24258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir423096274/syzkaller.0IKwTW/1014/bus" dev="sda1" ino=17452 res=1 [ 2060.488693] audit: type=1804 audit(1577137920.521:9100): pid=24256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir423096274/syzkaller.0IKwTW/1014/bus" dev="sda1" ino=17452 res=1 [ 2060.555117] audit: type=1804 audit(1577137920.531:9101): pid=24256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir423096274/syzkaller.0IKwTW/1014/bus" dev="sda1" ino=17452 res=1 21:52:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='\x04\x00', 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x240900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x0, 0x101082) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x40000, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000200)=0x8da) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getpid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) io_setup(0x80, &(0x7f0000000180)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) accept4(0xffffffffffffffff, &(0x7f0000000040)=@un=@abs, &(0x7f0000000100)=0x80, 0x100800) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0xc05812fe, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 21:52:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = inotify_init() r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x32, &(0x7f0000000900)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @broadcast}, @dccp={{0x4e20, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "21158c", 0x0, "79a23c"}}}}}}, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2061.299622] bond8 (unregistering): Released all slaves [ 2061.333541] bond7 (unregistering): Released all slaves [ 2061.372496] bond6 (unregistering): Released all slaves [ 2061.408217] bond5 (unregistering): Released all slaves [ 2061.439307] bond4 (unregistering): Released all slaves [ 2061.479293] bond3 (unregistering): Released all slaves [ 2061.496239] bond2 (unregistering): Released all slaves [ 2061.515260] bond1 (unregistering): Released all slaves [ 2061.542434] device hsr_slave_1 left promiscuous mode [ 2061.557957] device hsr_slave_0 left promiscuous mode [ 2061.573240] team0 (unregistering): Port device team_slave_1 removed [ 2061.590909] team0 (unregistering): Port device team_slave_0 removed [ 2061.624197] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2061.729354] bond0 (unregistering): Released all slaves [ 2072.180131] unregister_netdevice: waiting for lo to become free. Usage count = 3