ost State *** [ 1070.781535] RIP = 0xffffffff811f97e0 RSP = 0xffff8880893af670 02:20:42 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 02:20:42 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1070.851790] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1070.860236] binder: 12380:12383 got transaction to invalid handle [ 1070.890707] FSBase=00007f465814a700 GSBase=ffff8880ae600000 TRBase=fffffe0000033000 [ 1070.904241] FS-Cache: Duplicate cookie detected [ 1070.909065] FS-Cache: O-cookie c=00000000d4deb6a9 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1070.918829] FS-Cache: O-cookie d=00000000869bc68d n=00000000eeab2283 [ 1070.925554] FS-Cache: O-key=[10] '0200020000807f000008' [ 1070.931738] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1070.931771] CR0=0000000080050033 CR3=0000000094e71000 CR4=00000000001426f0 [ 1070.931801] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff88001360 02:20:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="816340400000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a98ce325cb3c7a64b9820a87a7fa1dc9c486c7de8d8e6355263668cd7b301543a91b4bf8d255c9eabfe86bdeb695a41775fec36fb859693232212919423a3bb5c1e1284ec08c6942b5f3570257c30c22066997de31d9e0", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 02:20:42 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 1070.937832] FS-Cache: N-cookie c=000000004a9b8f54 [p=000000004f092a8c fl=2 nc=0 na=1] [ 1070.959857] FS-Cache: N-cookie d=00000000869bc68d n=000000001f4e8f6d [ 1070.966504] FS-Cache: N-key=[10] '0200020000807f000008' [ 1070.984058] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1071.006518] *** Control State *** [ 1071.007230] FS-Cache: Duplicate cookie detected [ 1071.013649] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 1071.015032] FS-Cache: O-cookie c=00000000d4deb6a9 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1071.022186] binder: 12393:12394 unknown command 1077961601 [ 1071.029967] FS-Cache: O-cookie d=00000000869bc68d n=00000000eeab2283 [ 1071.035710] EntryControls=0000d1ff ExitControls=002fefff [ 1071.035728] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1071.035738] VMEntry: intr_info=800000f8 errcode=00000000 ilen=00000000 [ 1071.035747] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1071.035756] reason=80000021 qualification=0000000000000000 [ 1071.035764] IDTVectoring: info=00000000 errcode=00000000 [ 1071.035772] TSC Offset = 0xfffffdc0785c9ad6 [ 1071.035778] TPR Threshold = 0x00 [ 1071.035787] EPT pointer = 0x0000000095c4601e [ 1071.060715] binder: 12393:12394 ioctl c0306201 20000440 returned -22 [ 1071.061911] FS-Cache: O-key=[10] '0200020000807f000008' [ 1071.104988] FS-Cache: N-cookie c=00000000a30df661 [p=000000004f092a8c fl=2 nc=0 na=1] [ 1071.113074] FS-Cache: N-cookie d=00000000869bc68d n=000000000191d5a2 [ 1071.120382] FS-Cache: N-key=[10] '0200020000807f000008' 02:20:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000140)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:20:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) io_setup(0x5, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000005a40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000005a80)=0x9, 0x4) 02:20:43 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 02:20:43 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 02:20:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01ff40400000000000000000000000000000000000000000000000000000f7ffffff0000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) fcntl$dupfd(r0, 0x406, r0) 02:20:43 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1071.406717] binder: 12416:12417 unknown command 1078001409 [ 1071.412406] binder: 12416:12417 ioctl c0306201 20000440 returned -22 [ 1071.460387] binder: 12416:12417 unknown command 1078001409 [ 1071.469997] binder: 12416:12417 ioctl c0306201 20000440 returned -22 02:20:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0xfffffffffffffff7, 0xd4e, 0x0, 0x11, 0x7, 0x7, 0x4, 0x8f2, 0xfffffffffffff000, 0x10001, 0x2faba3af}) r2 = syz_open_pts(r0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") dup3(r2, r0, 0x0) read(r0, &(0x7f00000000c0)=""/19, 0x1b43d2d9) 02:20:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000140)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:20:43 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x99', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:43 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:43 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 02:20:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="016340400000000000000000000000000000000025cce547e6d46bbcb2300023545240000000000000000000000000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x2) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000200)={0x80, 0x17, &(0x7f00000001c0)="2a239a2ba7257dcd5978d6c815ddcae3693642ff0a2ea9163ebadcdf88a3344d0193d1112ae6e33e6bd208c38e926266784c7d6f3b00be0d0be98d4e26ad", {0x9, 0x400, 0x0, 0x9, 0xffffffffffffff20, 0x0, 0x0, 0xff}}) r2 = add_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)='/dev/binder#\x00') ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x108000000) 02:20:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000140)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:20:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7fff, 0x60000) r2 = request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffff8) r3 = geteuid() fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$negate(0xd, r2, 0xfb7, r2) keyctl$chown(0x4, r2, r3, r4) getsockopt$packet_int(r1, 0x107, 0x1f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01f30df2ed170855b65ed363404000000000000000000000000000000000000000009226f6c700000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) setsockopt$inet6_buf(r1, 0x29, 0x2a, &(0x7f0000000300)="55fc5611b458a5ebc842d7652b5ea9b13f26661181611b164201259be229579eeb99a6ba4e48a4c6269f93fd5a50605fa2d3c4dbd41fbfe9a754e0d2c786a349c770c096798375307862b2ed159f62c54fe4f3ec7617232c3aef2deab268eae318bb979b9aa59d27e2f766e4b4fe74e060e0726267806ea492cc04fd5fa2b9fa655aa596142acf613e524258de9964aa05c1386c1e2c629c18a40edb0b7992e4baed3c1a379532b75720745df6dec652c304fb5bd2cf8723768292dd2efddfebdc3bff", 0xfffffffffffffed8) 02:20:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:43 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1071.899277] binder: 12460:12461 unknown command -233966847 [ 1071.935868] binder: 12460:12461 ioctl c0306201 20000440 returned -22 [ 1071.962392] binder: 12460:12464 unknown command -233966847 [ 1071.991768] FS-Cache: Duplicate cookie detected [ 1071.996897] FS-Cache: O-cookie c=000000006afee06f [p=000000004f092a8c fl=222 nc=0 na=1] [ 1072.005813] FS-Cache: O-cookie d=00000000869bc68d n=00000000c63dbd8d [ 1072.012471] FS-Cache: O-key=[10] '0200020000807f000008' [ 1072.018469] FS-Cache: N-cookie c=000000006b442dd6 [p=000000004f092a8c fl=2 nc=0 na=1] [ 1072.026655] FS-Cache: N-cookie d=00000000869bc68d n=00000000088c183e [ 1072.033257] FS-Cache: N-key=[10] '0200020000807f000008' [ 1072.041584] binder: 12460:12464 ioctl c0306201 20000440 returned -22 02:20:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:44 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 02:20:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 02:20:44 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000480)={0x0, 0x2, &(0x7f0000000340)=""/192, &(0x7f0000000400)=""/72, &(0x7f00000002c0)=""/16, 0x6000}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000006200)={0x18, 0xf, 0x0, {{0x0, 0x2, 0x8}, 0x1000}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000006c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000400)=""/168, 0xfffffffffffffcc0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000680)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)={'team0\x00', r3}) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1, 0x9) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) unshare(0x40000000) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x100ffe, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000500)=0x1ff) sendmsg$IPVS_CMD_GET_DEST(r2, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000002c0)={0x0, 0x1ec4, 0xffe, &(0x7f0000000040)}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x2) lseek(r5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x1, &(0x7f0000000280)={0x4, &(0x7f0000000200)=[{0x2, 0x4, 0x1, 0x200}, {0x9, 0x5, 0x7fffffff, 0x1}, {0x3, 0xac1f, 0x8, 0x148a}, {0x8, 0x6, 0x0, 0x901d}]}) getpgid(0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) getsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000100), &(0x7f00000001c0)=0x4) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) r6 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r6, 0xc0285629, &(0x7f0000000040)={0x0, 0x0, 0x2}) 02:20:44 executing program 2: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init1(0x0) open(&(0x7f0000000080)='./file0\x00', 0x711001, 0x0) mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ustat(0x5, &(0x7f0000000100)) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000140)={0x3, 0x13, "950048e273fbf58f0e100be92d75cbc79da56c"}) 02:20:44 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 02:20:44 executing program 0: mremap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000200)={0x55, 0x4, 0x8, {0x4}, {0x7ff, 0x6}, @period={0x59, 0x4, 0x7f, 0x7ff, 0x5, {0x40, 0x6, 0x0, 0x4}, 0x4, &(0x7f00000001c0)=[0x4, 0x5, 0xff, 0x4]}}) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000080)=0x10001, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000000c0)={0x8001, 0x2, 'client0\x00', 0x1, "980a0704030ad516", "ef91969622a301000000005504503afa5718885fd460b4a3d5285c641344aa30", 0xbfb, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) [ 1072.613822] *** Guest State *** 02:20:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10000000010, 0x80a, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@dellink={0x28, 0x11, 0xc03, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r2 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f00000001c0)={0x2, 0x10d6}, 0x2) r3 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x61) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000080)) 02:20:44 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1072.636765] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1072.660407] IPVS: ftp: loaded support on port[0] = 21 [ 1072.693155] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 02:20:44 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 02:20:44 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000740)=ANY=[@ANYRES64, @ANYBLOB="fff8457aeee99e675276e2a723aa36182a3bdf33933e05726c47552cdf6355343959b226d2a6ad78be208f06def9445d4632d3f92197cdd966abcfefb34bf4debeaab368fb17cfaf4577a1de503a5f82a025c362a44a12a7cb3237b664f4e676d1708d3b8fe03d9feeb8299276064bc79cb642b9ff39c238166f2a942efbb2102e02a95a592d06bb1326519ff1ab2de9f8f6bcccfb11e157df03b34336f7096570dd935fc68301902e8dba83f7c3bc5d7a71c7d7f4aa8a825dedc23d9fef3be39350a049adcfcfe1335d99e433058c9033fcded3d628092fd6596c918ce8df5a409d4ddcea267128905b74fd663969241755db", @ANYBLOB="6f829e455d6b3fe8b86b37dd682f0efa5a7fc8b361bc10aa1639c54745aef562e3f1bb0c0e5214b0f82d41c239abc1b9099bc05ca027c7f0fad2f3ee4bf31aabaf68b2f07a1a36fd44199f70847d132d138dcc1d1384abcad738d22d8115a41b888bed2ce1b1e18e8724a047e1ef9ac7fab437aa", @ANYBLOB="aebb8f3d33026054358981f5fec258fed6a15097caf1d024746b29259f5884c8005f65eb74010736c0c9240bae6b7f1e02ec203b8c5918e37a7d8998588c7bdee0b27860a8c1f008e1566042255a650e6f57c3bb5caf43e343fa6a38bdd9831e76c69dd2e1343ee71122e8b45344e8749a2c3b2e373bfac39cb49da21675a05560e6ab2e02ddd2a3c740fd9722e9b8c44a6a0003d54f8be473a6894886c6155882fda47815aeecc8e7e2d04eb0a71a8f7d9d9fd8b626b0b4ed2b709e7439ae93cd2adc843555386731b1e2c016444b4f1c5a37656c37ac2391d82925969924fcee3074d5c4dd06", @ANYRES64=r0]) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) listen(r2, 0xfffffffffffffeff) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 1072.754437] CR3 = 0x0000000000000000 [ 1072.766802] binder_transaction: 11 callbacks suppressed [ 1072.766812] binder: 12495:12496 got reply transaction with no transaction stack [ 1072.784680] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1072.813814] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 1072.837485] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1072.852565] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 02:20:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1072.862064] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1072.870901] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1072.879544] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1072.888769] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1072.899103] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1072.907703] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1072.916191] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1072.924656] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1072.941695] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1072.961121] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1072.992193] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1073.039008] Interruptibility = 00000000 ActivityState = 00000000 [ 1073.064152] *** Host State *** [ 1073.078229] RIP = 0xffffffff811f97e0 RSP = 0xffff8880894f7670 [ 1073.098910] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1073.118730] FSBase=00007f465814a700 GSBase=ffff8880ae600000 TRBase=fffffe0000033000 [ 1073.134683] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1073.144341] CR0=0000000080050033 CR3=000000008db61000 CR4=00000000001426f0 [ 1073.151573] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff88001360 [ 1073.178969] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1073.192065] *** Control State *** [ 1073.199792] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 1073.208799] EntryControls=0000d1ff ExitControls=002fefff [ 1073.218350] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1073.225637] VMEntry: intr_info=800000f8 errcode=00000000 ilen=00000000 [ 1073.237643] IPVS: ftp: loaded support on port[0] = 21 [ 1073.247097] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1073.254115] reason=80000021 qualification=0000000000000000 [ 1073.260597] IDTVectoring: info=00000000 errcode=00000000 [ 1073.266346] TSC Offset = 0xfffffdbf558b1268 [ 1073.270848] TPR Threshold = 0x00 [ 1073.274422] EPT pointer = 0x000000005b29801e 02:20:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x280, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r4, 0xc0a85322, &(0x7f0000000080)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r4, 0x2, 0x1000000000000, r3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000440)={r3, 0x0, 0x3}) 02:20:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x813, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000280)=[@acquire_done={0x40106309, r1}], 0x0, 0x0, 0x0}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0xfcf8a9d3258d904a, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe168, 0x1, 0x1a, 0x10, "34991dcf9f313a4e430b55e65181e3f46c40db16b32e1b90fb257f205da425b8448117ee6244b5b1644de4d237d6b6fe3266e13281adc97974a060f2da5f2e62", "20a0920cace8c9eb96c6109a5d51eb0c9d87d416cad8a471b3c0eb1cb91d390f", [0x1, 0x3]}) 02:20:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:45 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:45 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000480)={0x0, 0x2, &(0x7f0000000340)=""/192, &(0x7f0000000400)=""/72, &(0x7f00000002c0)=""/16, 0x6000}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000006200)={0x18, 0xf, 0x0, {{0x0, 0x2, 0x8}, 0x1000}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000006c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000400)=""/168, 0xfffffffffffffcc0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000680)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)={'team0\x00', r3}) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1, 0x9) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) unshare(0x40000000) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x100ffe, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000500)=0x1ff) sendmsg$IPVS_CMD_GET_DEST(r2, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000002c0)={0x0, 0x1ec4, 0xffe, &(0x7f0000000040)}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x2) lseek(r5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x1, &(0x7f0000000280)={0x4, &(0x7f0000000200)=[{0x2, 0x4, 0x1, 0x200}, {0x9, 0x5, 0x7fffffff, 0x1}, {0x3, 0xac1f, 0x8, 0x148a}, {0x8, 0x6, 0x0, 0x901d}]}) getpgid(0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) getsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000100), &(0x7f00000001c0)=0x4) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) r6 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r6, 0xc0285629, &(0x7f0000000040)={0x0, 0x0, 0x2}) 02:20:45 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 1073.415074] binder: 12526:12527 BC_ACQUIRE_DONE u0000000000000000 no match [ 1073.425835] binder: 12526:12532 BC_ACQUIRE_DONE u0000000000000000 no match 02:20:45 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 02:20:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01634040000000000000000000000000000000000000000000000000d67681f0eb832e54000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x60000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000080)={0xff, 0x3f, 0x2, 0x7, 0xe97b6ff92bb9ae91, 0x80000000}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) 02:20:45 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:45 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 1073.762948] FS-Cache: Duplicate cookie detected [ 1073.768160] FS-Cache: O-cookie c=000000009520cde4 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1073.776645] FS-Cache: O-cookie d=00000000869bc68d n=00000000e34c7be6 [ 1073.783302] FS-Cache: O-key=[10] '0200020000807f000008' [ 1073.789467] FS-Cache: N-cookie c=000000000a6af345 [p=000000004f092a8c fl=2 nc=0 na=1] [ 1073.798097] FS-Cache: N-cookie d=00000000869bc68d n=000000007b24c72f [ 1073.804920] FS-Cache: N-key=[10] '0200020000807f000008' 02:20:45 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1073.811242] binder: 12549:12550 got reply transaction with no transaction stack [ 1073.836290] IPVS: ftp: loaded support on port[0] = 21 02:20:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1073.913051] binder_transaction: 9 callbacks suppressed [ 1073.913069] binder: 12549:12550 transaction failed 29201/-71, size 0-0 line 2801 02:20:45 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:45 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1074.026323] binder: 12549:12550 got reply transaction with no transaction stack [ 1074.026736] binder_release_work: 9 callbacks suppressed [ 1074.026743] binder: undelivered TRANSACTION_ERROR: 29201 02:20:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1074.081758] binder: 12549:12550 transaction failed 29201/-71, size 0-0 line 2801 [ 1074.110636] binder: undelivered TRANSACTION_ERROR: 29201 02:20:46 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000900)=ANY=[], 0x0) r1 = fanotify_init(0x0, 0x0) r2 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) recvmmsg(r2, &(0x7f000000a500), 0x400000000000259, 0x0, &(0x7f000000a780)={0x77359400}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000009c0)={0xf, 0x8}, 0x10) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000b40)) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) 02:20:46 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 02:20:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x7ff) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x2, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xffffffffffffff24, 0x0, 0x0}) 02:20:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:46 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_getscheduler(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) [ 1074.545245] FS-Cache: Duplicate cookie detected [ 1074.550150] FS-Cache: O-cookie c=00000000af5c96c5 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1074.558551] FS-Cache: O-cookie d=00000000869bc68d n=00000000f0a95e7d [ 1074.565348] FS-Cache: O-key=[10] '0200020000807f000008' [ 1074.571148] FS-Cache: N-cookie c=00000000201edd41 [p=000000004f092a8c fl=2 nc=0 na=1] [ 1074.579391] FS-Cache: N-cookie d=00000000869bc68d n=00000000a06bedf7 [ 1074.585990] FS-Cache: N-key=[10] '0200020000807f000008' 02:20:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:46 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1074.685736] binder: 12595:12596 got reply transaction with no transaction stack [ 1074.702450] binder: 12595:12596 transaction failed 29201/-71, size 0-0 line 2801 [ 1074.742382] binder: undelivered TRANSACTION_ERROR: 29201 02:20:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = getpgid(0x0) sched_setparam(r1, &(0x7f0000000000)=0xfffffffffffffffb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 02:20:46 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000900)=ANY=[], 0x0) r1 = fanotify_init(0x0, 0x0) r2 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) recvmmsg(r2, &(0x7f000000a500), 0x400000000000259, 0x0, &(0x7f000000a780)={0x77359400}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000009c0)={0xf, 0x8}, 0x10) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000b40)) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) 02:20:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1074.924998] binder: 12613:12614 got reply transaction with no transaction stack 02:20:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1074.983675] binder: 12613:12614 transaction failed 29201/-71, size 0-0 line 2801 [ 1075.008211] binder: undelivered TRANSACTION_ERROR: 29201 02:20:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@nfc_llcp, &(0x7f00000001c0)=0x80, 0x80800) getsockopt$inet_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000200)=""/68, &(0x7f0000000300)=0x44) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x4000) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000080)={0x4558, 0x0, [], {0x0, @bt={0x1, 0xfffffffffffff0c5, 0x0, 0x2, 0x8001, 0x3, 0x80000000, 0x3ff, 0x80, 0x6, 0x816, 0x101, 0x9, 0x800, 0x3, 0x19}}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0163404000000000000000000000000000000000000000000000000000b55b0000000000000000004000000000004000000000000000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) r3 = semget$private(0x0, 0x0, 0x0) semtimedop(r3, &(0x7f0000000340)=[{0x7, 0x9, 0x800}], 0x1, &(0x7f0000000380)={0x77359400}) 02:20:46 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) getpid() r2 = fcntl$getown(r1, 0x9) r3 = getpgrp(r2) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000200)=r3) fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffff9c, 0x0, 0x4, &(0x7f0000000400)='em0\x00', 0xffffffffffffffff}, 0x30) r6 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x9af, 0x4000) write$P9_RREADDIR(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="2a000000290200600300000000000000030000000000000000e02090efb247494807002e2f66696c6530"], 0x2a) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0x800, 0x8, 0x8, 0x1, 0x0, 0x65, 0x40303, 0x0, 0x40, 0x0, 0x8001, 0x7, 0xed6f, 0xb3, 0x100000000, 0x3e, 0x0, 0x0, 0x6, 0x1e3, 0x0, 0x8000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x373, 0x100000000, 0x0, 0x0, 0x652f, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0}, 0x10, 0x3, 0x1, 0x9, 0x0, 0x7, 0x4}, r4, 0x9, r5, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000700)) ioctl$BLKBSZGET(r6, 0x80081270, &(0x7f00000001c0)) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = pkey_alloc(0x0, 0x2) write$P9_ROPEN(r6, &(0x7f0000000300)={0x18, 0x71, 0x2, {{0x0, 0x1}, 0x1}}, 0x18) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, r7) write$binfmt_elf32(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7f014c4600010000000000040000000000003e0000000000000000003800000000000000000000000000200000000000000000000000000000000000000000000000000000000000080005000000000000003a3b707b0000dcd2"], 0x5a) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, 0x0, &(0x7f0000000500)) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) setsockopt$inet6_tcp_TLS_RX(r6, 0x6, 0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, 0xffffffffffffffff) readlinkat(r5, &(0x7f0000000040)='./file2\x00', &(0x7f0000000740)=""/4096, 0x1000) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, r8, 0x320, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000041) 02:20:47 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1075.196723] binder: 12624:12625 got reply transaction with no transaction stack [ 1075.241901] binder: 12624:12625 transaction failed 29201/-71, size 274877906944-4194304 line 2801 [ 1075.295718] binder: 12624:12635 got reply transaction with no transaction stack 02:20:47 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1075.380109] binder: 12624:12635 transaction failed 29201/-71, size 274877906944-4194304 line 2801 [ 1075.393616] binder: undelivered TRANSACTION_ERROR: 29201 [ 1075.482374] binder: undelivered TRANSACTION_ERROR: 29201 [ 1075.499601] FS-Cache: Duplicate cookie detected [ 1075.505856] FS-Cache: O-cookie c=0000000051c495ba [p=000000004f092a8c fl=222 nc=0 na=1] [ 1075.514199] FS-Cache: O-cookie d=00000000869bc68d n=00000000a2175285 [ 1075.520803] FS-Cache: O-key=[10] '0200020000807f000008' 02:20:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) [ 1075.526891] FS-Cache: N-cookie c=00000000d0ec45a3 [p=000000004f092a8c fl=2 nc=0 na=1] [ 1075.535196] FS-Cache: N-cookie d=00000000869bc68d n=0000000037f3ae71 [ 1075.541823] FS-Cache: N-key=[10] '0200020000807f000008' 02:20:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:47 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x803, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'sit0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x8, 0x2) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xff, 0xb, 0x1e, 0x14, "68301b284a45acbf38c255a78294fc6ba702c2405c7fd30530dec5c058cd7d52df41a93d6e222c5098010e1cb500176faa15f95d0f0005db2d18dcb675cb4fbd", "b7b4efd054da381befc4965156ba613c742bcb801d667e5909e68e2b74c3f668", [0xffff, 0xfffffffffffffffe]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 02:20:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) [ 1075.856367] Unknown ioctl 35099 02:20:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1075.879446] Unknown ioctl 19458 [ 1075.907736] binder: 12667:12668 got reply transaction with no transaction stack [ 1075.943684] binder: 12667:12668 transaction failed 29201/-71, size 0-0 line 2801 02:20:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) [ 1075.959569] Unknown ioctl 35099 [ 1075.995694] Unknown ioctl 19458 02:20:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1076.023709] binder: undelivered TRANSACTION_ERROR: 29201 02:20:48 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:48 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000100)={0xfffffffffffffff8, 0x3800000000000}) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[@free_buffer={0x40086303, r2}, @decrefs={0x40046307, 0x3}, @increfs_done={0x40106308, r2, 0x2}, @request_death={0x400c630e, 0x4, 0x1}], 0xfffffffffffffc71, 0x0, 0x0}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x20000, 0x0) 02:20:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 02:20:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:48 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1076.275221] binder: 12692:12693 ioctl c0306201 20000240 returned -14 02:20:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) [ 1076.338147] binder: 12692:12698 ioctl c0306201 20000240 returned -14 02:20:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1076.412003] FS-Cache: Duplicate cookie detected [ 1076.417095] FS-Cache: O-cookie c=00000000649d3c33 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1076.425639] FS-Cache: O-cookie d=00000000869bc68d n=00000000b9781845 [ 1076.432306] FS-Cache: O-key=[10] '0200020000807f000008' [ 1076.438132] FS-Cache: N-cookie c=00000000ef784baa [p=000000004f092a8c fl=2 nc=0 na=1] [ 1076.446440] FS-Cache: N-cookie d=00000000869bc68d n=000000005c5a157a [ 1076.453125] FS-Cache: N-key=[10] '0200020000807f000008' 02:20:48 executing program 2: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, 0xffffffffffffffff, 0x0) 02:20:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$swradio(&(0x7f0000000680)='/dev/swradio#\x00', 0x0, 0x2) fsetxattr$security_selinux(r1, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:event_device_t:s0\x00', 0x24, 0x1) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000006c0), 0x2) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) [ 1076.593347] *** Guest State *** [ 1076.607271] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 02:20:48 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:20:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1076.643423] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1076.656117] binder: 12715:12716 got reply transaction with no transaction stack [ 1076.674853] CR3 = 0x0000000000000000 [ 1076.696920] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1076.723992] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 1076.724611] binder: 12715:12716 transaction failed 29201/-71, size 0-0 line 2801 [ 1076.758372] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1076.776902] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1076.799483] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1076.811473] binder: undelivered TRANSACTION_ERROR: 29201 [ 1076.839019] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1076.878716] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1076.907892] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1076.929886] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1076.967507] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1076.982715] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1076.991786] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1077.000680] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1077.009177] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1077.016129] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1077.024466] Interruptibility = 00000000 ActivityState = 00000000 [ 1077.030869] *** Host State *** [ 1077.034800] RIP = 0xffffffff811f97e0 RSP = 0xffff88805b36f670 [ 1077.041034] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1077.048029] FSBase=00007f465814a700 GSBase=ffff8880ae700000 TRBase=fffffe0000033000 [ 1077.056434] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1077.062565] CR0=0000000080050033 CR3=00000000504a8000 CR4=00000000001426e0 [ 1077.070121] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff88001360 [ 1077.077290] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1077.083825] *** Control State *** [ 1077.087518] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 1077.094682] EntryControls=0000d1ff ExitControls=002fefff [ 1077.100366] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1077.107825] VMEntry: intr_info=800000f8 errcode=00000000 ilen=00000000 [ 1077.115060] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1077.121867] reason=80000021 qualification=0000000000000000 [ 1077.128688] IDTVectoring: info=00000000 errcode=00000000 [ 1077.134597] TSC Offset = 0xfffffdbd30da39e9 [ 1077.139151] TPR Threshold = 0x00 [ 1077.142733] EPT pointer = 0x000000004cb6d01e 02:20:48 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:20:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x0}) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000000c0)=0x4, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xd8, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x28, &(0x7f00000000c0), &(0x7f0000000100)=[0x20, 0x0, 0x40, 0x20, 0x38]}, 0x9}}, @clear_death={0x400c630f, 0x2, 0x2}, @increfs_done={0x40106308, r2, 0x2}, @decrefs={0x40046307, 0x3}, @acquire={0x40046305, 0x2}, @transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x28, 0x8, &(0x7f00000001c0)=[@ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x4, 0x1a}], &(0x7f0000000200)=[0x60]}}, @acquire={0x40046305, 0x1}, @dead_binder_done={0x40086310, 0x1}], 0x23, 0x0, &(0x7f0000000340)="d0aa3ce0ea46a7f04098582874f997fab296cecaba9fc05a8f86944484a3896d5b322a"}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000080)=0x100000) 02:20:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:48 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x0e', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1077.256340] binder: 12732:12734 got transaction to invalid handle [ 1077.295775] binder: 12732:12734 transaction failed 29201/-22, size 0-40 line 2896 02:20:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2012, r0, 0x0) [ 1077.336137] *** Guest State *** [ 1077.346908] binder: 12732:12748 got transaction to invalid handle [ 1077.353185] binder: 12732:12748 transaction failed 29201/-22, size 0-40 line 2896 [ 1077.353910] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 02:20:49 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1077.448255] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1077.471145] binder: undelivered TRANSACTION_ERROR: 29201 [ 1077.481457] binder: undelivered TRANSACTION_ERROR: 29201 02:20:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) r1 = socket$isdn(0x22, 0x3, 0x21) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000080)=""/125, &(0x7f0000000000)=0x7d) 02:20:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2012, r0, 0x0) [ 1077.521541] CR3 = 0x0000000000000000 [ 1077.532274] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1077.562418] FS-Cache: Duplicate cookie detected [ 1077.567200] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 1077.567218] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1077.567232] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1077.567252] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1077.567272] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1077.567290] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1077.567309] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1077.581372] FS-Cache: O-cookie c=00000000315d6e2c [p=000000004f092a8c fl=222 nc=0 na=1] [ 1077.630283] FS-Cache: O-cookie d=00000000869bc68d n=0000000022d9b5b7 [ 1077.637041] FS-Cache: O-key=[10] '0200020000807f000008' [ 1077.642867] FS-Cache: N-cookie c=0000000076f38208 [p=000000004f092a8c fl=2 nc=0 na=1] [ 1077.649904] binder: 12759:12760 got reply transaction with no transaction stack 02:20:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1077.650973] FS-Cache: N-cookie d=00000000869bc68d n=000000003254738e [ 1077.665091] FS-Cache: N-key=[10] '0200020000807f000008' 02:20:49 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x10001, 0x400) ioctl$NBD_DO_IT(r0, 0xab03) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {r2, 0x58, "d82734", "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"}}, 0x110) [ 1077.727695] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1077.753106] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1077.793712] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1077.805200] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1077.841432] binder_transaction: 1 callbacks suppressed [ 1077.841443] binder: 12769:12770 got reply transaction with no transaction stack [ 1077.879384] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 02:20:49 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2012, r0, 0x0) 02:20:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1077.888966] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1077.902526] binder: 12769:12770 got reply transaction with no transaction stack [ 1077.943240] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 02:20:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x30, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @rand_addr=0x828}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r2, 0x9}, &(0x7f00000001c0)=0x8) bind$isdn(r1, &(0x7f0000000080)={0x22, 0x37c1, 0x1, 0x8, 0x4}, 0x6) 02:20:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x0) [ 1078.016038] Interruptibility = 00000000 ActivityState = 00000000 [ 1078.062150] binder: 12784:12785 got reply transaction with no transaction stack [ 1078.071062] *** Host State *** [ 1078.088114] RIP = 0xffffffff811f97e0 RSP = 0xffff88804c2a7670 [ 1078.099909] binder: 12784:12785 got reply transaction with no transaction stack [ 1078.113155] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1078.165494] FSBase=00007f465814a700 GSBase=ffff8880ae700000 TRBase=fffffe0000003000 [ 1078.201211] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1078.214253] CR0=0000000080050033 CR3=00000000a7abd000 CR4=00000000001426e0 [ 1078.241645] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff88001360 [ 1078.266030] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1078.286611] *** Control State *** [ 1078.290296] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 1078.298606] EntryControls=0000d1ff ExitControls=002fefff [ 1078.306703] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1078.317621] VMEntry: intr_info=800000f8 errcode=00000000 ilen=00000000 [ 1078.324826] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1078.331598] reason=80000021 qualification=0000000000000000 [ 1078.338367] IDTVectoring: info=00000000 errcode=00000000 [ 1078.344297] TSC Offset = 0xfffffdbccab25dfc [ 1078.348809] TPR Threshold = 0x00 [ 1078.352357] EPT pointer = 0x000000006576401e [ 1078.361294] FS-Cache: Duplicate cookie detected [ 1078.366095] FS-Cache: O-cookie c=0000000035078847 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1078.374298] FS-Cache: O-cookie d=00000000869bc68d n=0000000049c89334 [ 1078.380793] FS-Cache: O-key=[10] '0200020000807f000008' [ 1078.386259] FS-Cache: N-cookie c=00000000bd5b2d0e [p=000000004f092a8c fl=2 nc=0 na=1] [ 1078.394310] FS-Cache: N-cookie d=00000000869bc68d n=00000000e48107b5 [ 1078.400821] FS-Cache: N-key=[10] '0200020000807f000008' 02:20:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:50 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffffffffffffff81, 0x784466a0413a1347) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 02:20:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:20:50 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, 0xffffffffffffffff, 0x0) 02:20:50 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\xe0', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:50 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x2, @local}, 0x10) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000b00)={0x4, 0x1, @value=0xfffffffffffff7a0}) r3 = syz_open_procfs(0x0, &(0x7f0000000b40)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xec\x00\xc6\xc4!\xd55t\xc9\xcf\xbaQ\xba\x00 S=T\xeb\x02*\x19\x03\xa9*9\xac\x9f\xb2\x16Z\xa4\xd0\r@\x92\x02\xa8\x05T\x9e\x03\xf6\xbaa\xc2\xfa\xc5\xa6\x81\xfa\x1f\x8c\xb2\xff\xff\xe8\x82z\xa1\xb9\xcf\xc9\xfe\xb5>\x1cP\x8aa\xf5b\x81\xd9*<\xb1\x95S\xc7y\x87\x11\xce,\xabv\x94\xd9\xe1\xca`$\x89fu(\x89\xaa]}\x18\x1a\xe8|&\x9b\xf2Q/\xd2\x9c\x0f\x1c\x042\x94\xcd\xcf\xbf\xfb\xe4:\xbf\x8a\xec\xa4\xeb\xb9e\xc4Q\x1f\xee\xd0\xb9W\x1f\t\xda\rY\x02\xf5\xf2\x83\xa99\xd9\xb2b1\x9d\x9b~\xff\x1b\xfd\xed31j\x85\x01\x00\xb5\xb3\xa0\xf2\xa18:\x8em\xact!/g\x82\xd4B\xde\x17i\xe7.\x8a\xceD\xb7\xbb\xdf\x85ga?\xa2\'q5\xa1\xea\xdaI\xe4z\x06x\x01l?\x1a+s\x18\xcdW\xfe\x81>]\xbb\x03\r\xf1+P\xcd@\xbd+,S\'\x92\xd0\xee\x041-\xa6`QuR\xd0\xa9\f') sendfile(r2, r3, &(0x7f0000000180)=0xf00ff, 0x100000002) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000380)={0x138, 0x18, 0x4, 0x70bd2b, 0x25dfdbfd, "", [@nested={0xd4, 0x50, [@typed={0xc, 0x2, @u64=0x7fff}, @generic="0673d824422433bafa086c116406ab796600e3363a1803efb9de96550ed93c1ba57c2efdd6cc97fddb5809ac67296f2619f187d17dcc68c93b99e6d3d6ae9eb38a2883081f3d7dbdd9b02d28c6a3a4634274df687cc6927edfc9e74db9bc35145a45bb305313db30d9d933cfc856dae82417a8b82ea591abbcbfd8d0d4cf7d9f155be00689439aed37c7aab632b4960e7c5fbcb866bbf1e91131b93aa915c6eafd485d3c15861cbb363623ed8543", @typed={0xc, 0x3, @u64=0x401}, @typed={0x8, 0x92, @uid=r5}]}, @nested={0x40, 0x60, [@typed={0x4, 0x37}, @typed={0x14, 0x79, @ipv6=@mcast2}, @typed={0x8, 0x25, @ipv4}, @generic="9b9384a0ce8992ac0aef501dfa7cf20f3645feb779429b74a624"]}, @generic="5aa0a6ee7e6b9b4fb6ee2823ccd890f4981d20ca"]}, 0x138}, {&(0x7f0000000080)={0x68, 0x1a, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@generic="1757892355ca928a2abb5faba66adddba51221a2de33fa6b23bd86274af931d9511a7bbf323f351e112aa9c3ae14aea7ed6f2c1fc5fa2eab943dbe22fbd25c9285d117097a1ead54d159637e16f7603f2b7d95850ab8"]}, 0x68}, {&(0x7f00000004c0)={0x4b0, 0x15, 0x8, 0x70bd2d, 0x25dfdbfe, "", [@nested={0xac, 0x62, [@generic="80afc5915deb9d31b59d5d9e1e510ffba5a25583184c43fbd28e2683274478997fb7a9ac16985573b5ae7814b30ed2fbf016fb3f06acf87b4066749715c2dc2b854a6124ebbaf7e86bfb4077b2e7a07f93a6d3f7e9a18393beb232d3a446761e90844c41d324880866290c9eea82866ce89b37b259c926f917e8c5992969c0ff66fbb9fb6e52581d513b551f87332d285d56fa8dc33b59ba4b68c0116d85e2858358d310f76f7631"]}, @nested={0x140, 0x79, [@generic="ebf98c9a0870b8f8fd7f724cc738d070774c5c43b8075bc26584c59f369f06653a94cf0d9d8d1eb9a71d3a4c0cbb84e6ade998e5e9f34553471dbdff682d36b9a493e63140ec540f9a6ce9213ba60f72faee2814487788e8f26fc716cb24e06b7ef818dc8643e65698473317faf8edff91999f69ff3209b214096b9e41884e925766e2d8505182779fc64803ba24e2a10b08034d5dd3b056f9ee32b51d0ddb435180c5b659f25e9a23c057b77b87428545e59c0f2172e727253f6e4004eb0cf7562dedcd0917d60ca1034f300ff5a5e591bc08496f0b0f90db", @generic="548406ca42", @generic="486d6f35d112966a732714d03d2937e27d75df7c1ab1147460f11ea88aff2092420a67b9c6880e1b0249ede3e23d482b3717ca100395d1d3d5a80ffc9f9caeb475a1167eefe733bbf64df78f888f5f6297c7487e644d871828b1cda6"]}, @generic="93510cb1cc7b9116eed9ba47b179d6d31c4f5216fdd3498197c92815", @typed={0xc, 0x4e, @u64}, @typed={0xc, 0x8f, @u64=0x3}, @nested={0x280, 0x50, [@typed={0x8, 0x77, @ipv4=@multicast1}, @generic="75b3d3f7fc126d871b1b904462d9b74d1846868563430f9b10ed6979aadb36ccd36ca03c1df66cf650fcb875d0535c1ddcc69e922997e1af996a4f69b707c0bb95b80dee826083b88febbfafd64b2026f0e5", @generic="8489d67fa6a69ecf6f8b9ee52bb6fd8504c843aee6e7b8b316fe19fa0bb9dfaccaa130a8b22161283204e43e607bae8729f86b1606a3490f7b049e809f3dab6441431fdc64396c56d13ad1620b6bf1f4cc06b1f6360523155b194c488453c4e819adff875aebea300c9c8185dd9df8024d69153a1cbacc4b3639a39332ab0571db8c084a147d469649cf9a998d87ee03a15f1b9f1acbcf8d78c4afb5308c4406b4535011446610fc4a4fdb0b236c1d813bad1a72", @typed={0x8, 0x9, @ipv4=@empty}, @generic="3dffc197b6887a669e80c6bf1334af9aacba9783025d319075ff16385164b819a43a534ce843ec8c", @generic="1d6d5f3dfb28c9ea61ad74ba08f8900e4ded1ff0c7d3b2062f2fb108b3906f03c8fcedef8c12583a2c7895d853ec7c66e137ab7bb4def627ddd2a73f702e9d419e40f156eecd3d8857cd", @generic="2c1e11dc948d687c9141cf77b709f3791f70a983125b45f4d44d53afb8577c72ab56419ca599874e3c3a75e6c8499c8e88822d1d85ad8aa6668e8c7ca20b005e90fdba290fddbe8a4557d1ce00a4c8e74d7f26877570f330a9f256184daa4e196cf1df97382936a3794276998e01fe8b84c5bb3f3ebfeca69e7b9cce7692ee2825fc1c8194af89b0d2475ee7ed8392c411abe9a584f019d5788f15be6bff09112fc6", @generic="d31d0759896fde8df09f5638c6f60ead4a7b7e4bfdd79d22988280e3efc0cea109b1f7d04773497ae7fd2ec54b05c221e41c03345bcd21bf7314e16add87494f8151339bae682896f23fb389b950d38274c9"]}]}, 0x4b0}], 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="30000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="180000000000425c8f083c76c3fd0000", @ANYRES32=r4, @ANYRES32=r1], 0x98, 0x8000}, 0x20004840) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000ac0)={'teql0\x00', &(0x7f0000000240)=@ethtool_eeprom={0x43, 0x20000000, 0x5, 0x1, 'D'}}) readahead(r8, 0x6, 0x0) [ 1078.540608] binder: 12798:12799 got reply transaction with no transaction stack 02:20:50 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) [ 1078.598343] binder: 12798:12812 got reply transaction with no transaction stack [ 1078.673967] *** Guest State *** [ 1078.687721] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1078.697145] FAULT_INJECTION: forcing a failure. [ 1078.697145] name failslab, interval 1, probability 0, space 0, times 0 02:20:50 executing program 0: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x82000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f00000001c0)=0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x100, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x45, 0x40, 0x9, 0x2, 0x19, 0x6, 0x2, 0x10200000, 0x1, 0x1f, 0xfffffffffffffff9, 0x40}) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 02:20:50 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x05', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1078.755758] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1078.803154] CR3 = 0x0000000000000000 [ 1078.836557] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1078.844951] binder: 12823:12824 got reply transaction with no transaction stack [ 1078.884626] CPU: 0 PID: 12820 Comm: syz-executor2 Not tainted 4.20.0+ #2 [ 1078.891982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1078.901343] Call Trace: [ 1078.903961] dump_stack+0x1db/0x2d0 [ 1078.907606] ? dump_stack_print_info.cold+0x20/0x20 [ 1078.912623] ? print_usage_bug+0xd0/0xd0 [ 1078.916699] should_fail.cold+0xa/0x15 [ 1078.920595] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1078.925706] ? ___might_sleep+0x1e7/0x310 [ 1078.929860] ? arch_local_save_flags+0x50/0x50 [ 1078.934456] __should_failslab+0x121/0x190 [ 1078.938695] should_failslab+0x9/0x14 [ 1078.942499] kmem_cache_alloc+0x2be/0x710 [ 1078.946652] ? aa_file_perm+0x42e/0x1090 [ 1078.950793] vm_area_dup+0x7a/0x230 [ 1078.954429] ? vm_area_alloc+0x1d0/0x1d0 [ 1078.958492] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1078.964034] ? may_expand_vm+0x1c7/0x8b0 [ 1078.968100] ? process_measurement+0x268/0x1be0 [ 1078.972771] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1078.978315] __split_vma+0xad/0x570 [ 1078.981949] ? find_vma+0x30/0x170 [ 1078.985506] __do_munmap+0x2ef/0xed0 [ 1078.989232] mmap_region+0x698/0x1ca0 [ 1078.993047] ? __x64_sys_brk+0x8f0/0x8f0 [ 1078.997151] ? arch_get_unmapped_area+0x730/0x730 [ 1079.001999] ? refcount_inc_not_zero_checked+0x2e0/0x2e0 [ 1079.007485] ? aa_capable+0xe10/0xe10 [ 1079.011296] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1079.016314] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1079.021850] ? can_do_mlock+0x110/0x180 [ 1079.025945] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1079.031489] ? can_do_mlock.part.0+0x20/0x20 [ 1079.035904] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1079.041449] ? get_unmapped_area+0x295/0x3b0 [ 1079.045864] do_mmap+0xa09/0x1220 [ 1079.049328] ? mmap_region+0x1ca0/0x1ca0 [ 1079.053391] ? vm_mmap_pgoff+0x1ad/0x2b0 [ 1079.057455] ? down_read_killable+0x150/0x150 [ 1079.061966] ? security_mmap_file+0x1a7/0x1e0 [ 1079.066468] vm_mmap_pgoff+0x20b/0x2b0 [ 1079.070369] ? vma_is_stack_for_current+0xd0/0xd0 [ 1079.075231] ksys_mmap_pgoff+0x4f8/0x650 [ 1079.079296] ? find_mergeable_anon_vma+0xd0/0xd0 [ 1079.084055] ? trace_hardirqs_on+0xbd/0x310 [ 1079.088374] ? __ia32_sys_read+0xb0/0xb0 [ 1079.092438] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1079.097805] ? trace_hardirqs_off_caller+0x300/0x300 [ 1079.102911] __x64_sys_mmap+0xe9/0x1b0 [ 1079.106818] do_syscall_64+0x1a3/0x800 [ 1079.110731] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1079.115668] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1079.120693] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1079.125543] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1079.130731] RIP: 0033:0x457ec9 [ 1079.133925] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1079.152835] RSP: 002b:00007f5dad9bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1079.160544] RAX: ffffffffffffffda RBX: 00007f5dad9bfc90 RCX: 0000000000457ec9 [ 1079.167809] RDX: 0000000000000004 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 1079.175078] RBP: 000000000073bf00 R08: 0000000000000003 R09: 0000000000000000 02:20:50 executing program 4 (fault-call:5 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1079.182347] R10: 0000000000002012 R11: 0000000000000246 R12: 00007f5dad9c06d4 [ 1079.189615] R13: 00000000004c39e5 R14: 00000000004d65c8 R15: 0000000000000004 [ 1079.215757] binder_transaction: 8 callbacks suppressed [ 1079.215775] binder: 12823:12824 transaction failed 29201/-71, size 0-0 line 2801 [ 1079.295372] binder: 12823:12834 got reply transaction with no transaction stack [ 1079.334332] FAULT_INJECTION: forcing a failure. [ 1079.334332] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.370119] binder: 12823:12834 transaction failed 29201/-71, size 0-0 line 2801 [ 1079.395315] CPU: 0 PID: 12835 Comm: syz-executor4 Not tainted 4.20.0+ #2 [ 1079.402173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1079.411531] Call Trace: [ 1079.414134] dump_stack+0x1db/0x2d0 [ 1079.417780] ? dump_stack_print_info.cold+0x20/0x20 [ 1079.422802] ? __lock_acquire+0x572/0x4a30 [ 1079.427048] ? __lock_acquire+0x572/0x4a30 [ 1079.431341] should_fail.cold+0xa/0x15 [ 1079.435278] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1079.440398] ? ___might_sleep+0x1e7/0x310 [ 1079.444557] ? arch_local_save_flags+0x50/0x50 [ 1079.449146] ? print_usage_bug+0xd0/0xd0 [ 1079.453223] __should_failslab+0x121/0x190 [ 1079.457474] should_failslab+0x9/0x14 [ 1079.461283] kmem_cache_alloc+0x2be/0x710 [ 1079.465442] ? __lock_acquire+0x572/0x4a30 [ 1079.466496] FAULT_INJECTION: forcing a failure. [ 1079.466496] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.469690] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1079.469791] mmu_topup_memory_caches+0x97/0x490 [ 1079.469812] kvm_mmu_load+0x21/0x1200 [ 1079.494981] ? mark_held_locks+0x100/0x100 [ 1079.499227] ? lock_release+0xc40/0xc40 [ 1079.503210] ? mark_held_locks+0x100/0x100 [ 1079.507500] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1079.513145] vcpu_enter_guest+0x3f0e/0x6520 02:20:51 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:51 executing program 2 (fault-call:1 fault-nth:1): r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) [ 1079.517502] ? emulator_read_emulated+0x50/0x50 [ 1079.522181] ? add_lock_to_list.isra.0+0x450/0x450 [ 1079.527125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1079.532670] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1079.538312] ? check_preemption_disabled+0x48/0x290 [ 1079.543372] ? __lock_is_held+0xb6/0x140 [ 1079.547462] ? lock_acquire+0x1db/0x570 [ 1079.551445] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 1079.556502] ? lock_release+0xc40/0xc40 [ 1079.560492] ? kvm_gen_update_masterclock+0x380/0x380 [ 1079.560510] ? rcu_sync_dtor+0x170/0x170 [ 1079.569879] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1079.573696] binder_release_work: 8 callbacks suppressed [ 1079.573703] binder: undelivered TRANSACTION_ERROR: 29201 [ 1079.574728] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1079.580081] binder: undelivered TRANSACTION_ERROR: 29201 [ 1079.585591] kvm_vcpu_ioctl+0x558/0x12d0 [ 1079.585612] ? kvm_vcpu_block+0x1010/0x1010 [ 1079.604417] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1079.609984] ? lock_downgrade+0x910/0x910 [ 1079.614312] ? kasan_check_read+0x11/0x20 [ 1079.614330] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1079.623753] ? rcu_read_unlock_special+0x380/0x380 [ 1079.628700] ? __fget+0x499/0x710 [ 1079.632173] ? iterate_fd+0x4b0/0x4b0 [ 1079.635996] ? kvm_vcpu_block+0x1010/0x1010 [ 1079.640325] do_vfs_ioctl+0x107b/0x17d0 [ 1079.644315] ? wait_for_completion+0x810/0x810 [ 1079.648910] ? ioctl_preallocate+0x2f0/0x2f0 [ 1079.653342] ? __fget_light+0x2db/0x420 [ 1079.657328] ? fget_raw+0x20/0x20 [ 1079.660799] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1079.666341] ? fput+0x128/0x1a0 [ 1079.669628] ? do_syscall_64+0x8c/0x800 [ 1079.673610] ? do_syscall_64+0x8c/0x800 [ 1079.677596] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1079.682190] ? security_file_ioctl+0x93/0xc0 [ 1079.686630] ksys_ioctl+0xab/0xd0 [ 1079.690126] __x64_sys_ioctl+0x73/0xb0 [ 1079.694030] do_syscall_64+0x1a3/0x800 [ 1079.697944] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1079.702893] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1079.707927] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1079.712805] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1079.718000] RIP: 0033:0x457ec9 [ 1079.721203] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1079.740107] RSP: 002b:00007f7cd405fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1079.747821] RAX: ffffffffffffffda RBX: 00007f7cd405fc90 RCX: 0000000000457ec9 [ 1079.755092] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1079.762369] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1079.769642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7cd40606d4 [ 1079.776928] R13: 00000000004c0e36 R14: 00000000004d2758 R15: 0000000000000006 [ 1079.784254] CPU: 1 PID: 12841 Comm: syz-executor2 Not tainted 4.20.0+ #2 [ 1079.791110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1079.800574] Call Trace: [ 1079.803180] dump_stack+0x1db/0x2d0 [ 1079.806824] ? dump_stack_print_info.cold+0x20/0x20 [ 1079.811842] ? __split_vma+0xad/0x570 [ 1079.815650] ? __do_munmap+0x2ef/0xed0 [ 1079.819540] ? mmap_region+0x698/0x1ca0 [ 1079.823515] ? do_mmap+0xa09/0x1220 [ 1079.827144] ? vm_mmap_pgoff+0x20b/0x2b0 [ 1079.831228] ? __x64_sys_mmap+0xe9/0x1b0 [ 1079.835297] should_fail.cold+0xa/0x15 [ 1079.839189] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1079.844312] ? lock_downgrade+0x910/0x910 [ 1079.848465] ? kasan_check_read+0x11/0x20 [ 1079.852632] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1079.857915] ? add_lock_to_list.isra.0+0x450/0x450 [ 1079.862857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1079.868397] ? vm_area_dup+0x7a/0x230 [ 1079.872224] __should_failslab+0x121/0x190 [ 1079.876469] should_failslab+0x9/0x14 [ 1079.880274] kmem_cache_alloc+0x47/0x710 [ 1079.884338] ? vm_area_dup+0x7a/0x230 [ 1079.888145] ? vm_area_dup+0x7a/0x230 [ 1079.891963] ? rcu_read_lock_sched_held+0x110/0x130 [ 1079.896996] anon_vma_clone+0x148/0x750 [ 1079.900985] ? memcpy+0x46/0x50 [ 1079.904279] ? unlink_anon_vmas+0xa50/0xa50 [ 1079.908601] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1079.914141] ? may_expand_vm+0x1c7/0x8b0 [ 1079.918202] ? process_measurement+0x268/0x1be0 [ 1079.922878] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1079.928421] __split_vma+0x180/0x570 [ 1079.932154] ? find_vma+0x30/0x170 [ 1079.935703] __do_munmap+0x2ef/0xed0 [ 1079.939429] mmap_region+0x698/0x1ca0 [ 1079.943249] ? __x64_sys_brk+0x8f0/0x8f0 [ 1079.947311] ? arch_get_unmapped_area+0x730/0x730 [ 1079.952157] ? refcount_inc_not_zero_checked+0x2e0/0x2e0 [ 1079.957615] ? aa_capable+0xe10/0xe10 [ 1079.961435] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1079.966466] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1079.972039] ? can_do_mlock+0x110/0x180 [ 1079.976014] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1079.981582] ? can_do_mlock.part.0+0x20/0x20 [ 1079.986006] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1079.991544] ? get_unmapped_area+0x295/0x3b0 [ 1079.995966] do_mmap+0xa09/0x1220 [ 1079.999468] ? mmap_region+0x1ca0/0x1ca0 [ 1080.003555] ? vm_mmap_pgoff+0x1ad/0x2b0 [ 1080.007651] ? down_read_killable+0x150/0x150 [ 1080.012152] ? security_mmap_file+0x1a7/0x1e0 [ 1080.016655] vm_mmap_pgoff+0x20b/0x2b0 [ 1080.020558] ? vma_is_stack_for_current+0xd0/0xd0 [ 1080.025875] ksys_mmap_pgoff+0x4f8/0x650 [ 1080.029966] ? find_mergeable_anon_vma+0xd0/0xd0 [ 1080.034740] ? trace_hardirqs_on+0xbd/0x310 [ 1080.039061] ? __ia32_sys_read+0xb0/0xb0 [ 1080.043123] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1080.048488] ? trace_hardirqs_off_caller+0x300/0x300 [ 1080.053594] __x64_sys_mmap+0xe9/0x1b0 [ 1080.057491] do_syscall_64+0x1a3/0x800 [ 1080.061387] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1080.066354] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1080.071379] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1080.076244] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1080.081431] RIP: 0033:0x457ec9 [ 1080.084649] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1080.103547] RSP: 002b:00007f5dad9bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1080.111252] RAX: ffffffffffffffda RBX: 00007f5dad9bfc90 RCX: 0000000000457ec9 [ 1080.118542] RDX: 0000000000000004 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 1080.125811] RBP: 000000000073bf00 R08: 0000000000000003 R09: 0000000000000000 [ 1080.133076] R10: 0000000000002012 R11: 0000000000000246 R12: 00007f5dad9c06d4 [ 1080.140340] R13: 00000000004c39e5 R14: 00000000004d65c8 R15: 0000000000000004 [ 1080.153843] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 1080.159845] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1080.203157] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1080.222316] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1080.249895] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1080.272301] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1080.293807] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1080.308772] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1080.350581] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1080.394550] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1080.424441] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1080.432449] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1080.440970] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1080.448067] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1080.455714] Interruptibility = 00000000 ActivityState = 00000000 [ 1080.461968] *** Host State *** [ 1080.465574] RIP = 0xffffffff811f97e0 RSP = 0xffff8880a4a17670 [ 1080.471554] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1080.478165] FSBase=00007f465814a700 GSBase=ffff8880ae600000 TRBase=fffffe0000003000 [ 1080.486049] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1080.491945] CR0=0000000080050033 CR3=000000005a21d000 CR4=00000000001426f0 [ 1080.499091] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff88001360 [ 1080.505788] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1080.511827] *** Control State *** [ 1080.515343] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 1080.522006] EntryControls=0000d1ff ExitControls=002fefff [ 1080.527511] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1080.534482] VMEntry: intr_info=800000f8 errcode=00000000 ilen=00000000 02:20:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x142) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 02:20:52 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:52 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x2, @local}, 0x10) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000b00)={0x4, 0x1, @value=0xfffffffffffff7a0}) r3 = syz_open_procfs(0x0, &(0x7f0000000b40)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xec\x00\xc6\xc4!\xd55t\xc9\xcf\xbaQ\xba\x00 S=T\xeb\x02*\x19\x03\xa9*9\xac\x9f\xb2\x16Z\xa4\xd0\r@\x92\x02\xa8\x05T\x9e\x03\xf6\xbaa\xc2\xfa\xc5\xa6\x81\xfa\x1f\x8c\xb2\xff\xff\xe8\x82z\xa1\xb9\xcf\xc9\xfe\xb5>\x1cP\x8aa\xf5b\x81\xd9*<\xb1\x95S\xc7y\x87\x11\xce,\xabv\x94\xd9\xe1\xca`$\x89fu(\x89\xaa]}\x18\x1a\xe8|&\x9b\xf2Q/\xd2\x9c\x0f\x1c\x042\x94\xcd\xcf\xbf\xfb\xe4:\xbf\x8a\xec\xa4\xeb\xb9e\xc4Q\x1f\xee\xd0\xb9W\x1f\t\xda\rY\x02\xf5\xf2\x83\xa99\xd9\xb2b1\x9d\x9b~\xff\x1b\xfd\xed31j\x85\x01\x00\xb5\xb3\xa0\xf2\xa18:\x8em\xact!/g\x82\xd4B\xde\x17i\xe7.\x8a\xceD\xb7\xbb\xdf\x85ga?\xa2\'q5\xa1\xea\xdaI\xe4z\x06x\x01l?\x1a+s\x18\xcdW\xfe\x81>]\xbb\x03\r\xf1+P\xcd@\xbd+,S\'\x92\xd0\xee\x041-\xa6`QuR\xd0\xa9\f') sendfile(r2, r3, &(0x7f0000000180)=0xf00ff, 0x100000002) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000380)={0x138, 0x18, 0x4, 0x70bd2b, 0x25dfdbfd, "", [@nested={0xd4, 0x50, [@typed={0xc, 0x2, @u64=0x7fff}, @generic="0673d824422433bafa086c116406ab796600e3363a1803efb9de96550ed93c1ba57c2efdd6cc97fddb5809ac67296f2619f187d17dcc68c93b99e6d3d6ae9eb38a2883081f3d7dbdd9b02d28c6a3a4634274df687cc6927edfc9e74db9bc35145a45bb305313db30d9d933cfc856dae82417a8b82ea591abbcbfd8d0d4cf7d9f155be00689439aed37c7aab632b4960e7c5fbcb866bbf1e91131b93aa915c6eafd485d3c15861cbb363623ed8543", @typed={0xc, 0x3, @u64=0x401}, @typed={0x8, 0x92, @uid=r5}]}, @nested={0x40, 0x60, [@typed={0x4, 0x37}, @typed={0x14, 0x79, @ipv6=@mcast2}, @typed={0x8, 0x25, @ipv4}, @generic="9b9384a0ce8992ac0aef501dfa7cf20f3645feb779429b74a624"]}, @generic="5aa0a6ee7e6b9b4fb6ee2823ccd890f4981d20ca"]}, 0x138}, {&(0x7f0000000080)={0x68, 0x1a, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@generic="1757892355ca928a2abb5faba66adddba51221a2de33fa6b23bd86274af931d9511a7bbf323f351e112aa9c3ae14aea7ed6f2c1fc5fa2eab943dbe22fbd25c9285d117097a1ead54d159637e16f7603f2b7d95850ab8"]}, 0x68}, {&(0x7f00000004c0)={0x4b0, 0x15, 0x8, 0x70bd2d, 0x25dfdbfe, "", [@nested={0xac, 0x62, [@generic="80afc5915deb9d31b59d5d9e1e510ffba5a25583184c43fbd28e2683274478997fb7a9ac16985573b5ae7814b30ed2fbf016fb3f06acf87b4066749715c2dc2b854a6124ebbaf7e86bfb4077b2e7a07f93a6d3f7e9a18393beb232d3a446761e90844c41d324880866290c9eea82866ce89b37b259c926f917e8c5992969c0ff66fbb9fb6e52581d513b551f87332d285d56fa8dc33b59ba4b68c0116d85e2858358d310f76f7631"]}, @nested={0x140, 0x79, [@generic="ebf98c9a0870b8f8fd7f724cc738d070774c5c43b8075bc26584c59f369f06653a94cf0d9d8d1eb9a71d3a4c0cbb84e6ade998e5e9f34553471dbdff682d36b9a493e63140ec540f9a6ce9213ba60f72faee2814487788e8f26fc716cb24e06b7ef818dc8643e65698473317faf8edff91999f69ff3209b214096b9e41884e925766e2d8505182779fc64803ba24e2a10b08034d5dd3b056f9ee32b51d0ddb435180c5b659f25e9a23c057b77b87428545e59c0f2172e727253f6e4004eb0cf7562dedcd0917d60ca1034f300ff5a5e591bc08496f0b0f90db", @generic="548406ca42", @generic="486d6f35d112966a732714d03d2937e27d75df7c1ab1147460f11ea88aff2092420a67b9c6880e1b0249ede3e23d482b3717ca100395d1d3d5a80ffc9f9caeb475a1167eefe733bbf64df78f888f5f6297c7487e644d871828b1cda6"]}, @generic="93510cb1cc7b9116eed9ba47b179d6d31c4f5216fdd3498197c92815", @typed={0xc, 0x4e, @u64}, @typed={0xc, 0x8f, @u64=0x3}, @nested={0x280, 0x50, [@typed={0x8, 0x77, @ipv4=@multicast1}, @generic="75b3d3f7fc126d871b1b904462d9b74d1846868563430f9b10ed6979aadb36ccd36ca03c1df66cf650fcb875d0535c1ddcc69e922997e1af996a4f69b707c0bb95b80dee826083b88febbfafd64b2026f0e5", @generic="8489d67fa6a69ecf6f8b9ee52bb6fd8504c843aee6e7b8b316fe19fa0bb9dfaccaa130a8b22161283204e43e607bae8729f86b1606a3490f7b049e809f3dab6441431fdc64396c56d13ad1620b6bf1f4cc06b1f6360523155b194c488453c4e819adff875aebea300c9c8185dd9df8024d69153a1cbacc4b3639a39332ab0571db8c084a147d469649cf9a998d87ee03a15f1b9f1acbcf8d78c4afb5308c4406b4535011446610fc4a4fdb0b236c1d813bad1a72", @typed={0x8, 0x9, @ipv4=@empty}, @generic="3dffc197b6887a669e80c6bf1334af9aacba9783025d319075ff16385164b819a43a534ce843ec8c", @generic="1d6d5f3dfb28c9ea61ad74ba08f8900e4ded1ff0c7d3b2062f2fb108b3906f03c8fcedef8c12583a2c7895d853ec7c66e137ab7bb4def627ddd2a73f702e9d419e40f156eecd3d8857cd", @generic="2c1e11dc948d687c9141cf77b709f3791f70a983125b45f4d44d53afb8577c72ab56419ca599874e3c3a75e6c8499c8e88822d1d85ad8aa6668e8c7ca20b005e90fdba290fddbe8a4557d1ce00a4c8e74d7f26877570f330a9f256184daa4e196cf1df97382936a3794276998e01fe8b84c5bb3f3ebfeca69e7b9cce7692ee2825fc1c8194af89b0d2475ee7ed8392c411abe9a584f019d5788f15be6bff09112fc6", @generic="d31d0759896fde8df09f5638c6f60ead4a7b7e4bfdd79d22988280e3efc0cea109b1f7d04773497ae7fd2ec54b05c221e41c03345bcd21bf7314e16add87494f8151339bae682896f23fb389b950d38274c9"]}]}, 0x4b0}], 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="30000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="180000000000425c8f083c76c3fd0000", @ANYRES32=r4, @ANYRES32=r1], 0x98, 0x8000}, 0x20004840) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000ac0)={'teql0\x00', &(0x7f0000000240)=@ethtool_eeprom={0x43, 0x20000000, 0x5, 0x1, 'D'}}) readahead(r8, 0x6, 0x0) 02:20:52 executing program 2 (fault-call:1 fault-nth:2): r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:20:52 executing program 4 (fault-call:5 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1080.541145] VMExit: intr_info=00000000 errcode=00000000 ilen=00000001 [ 1080.547785] reason=80000021 qualification=0000000000000000 [ 1080.555071] IDTVectoring: info=00000000 errcode=00000000 [ 1080.560523] TSC Offset = 0xfffffdbc149a26f0 [ 1080.564893] TPR Threshold = 0x00 [ 1080.568265] EPT pointer = 0x000000006ae6601e 02:20:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000480)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x3, 'ip_vti0\x00'}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) [ 1080.722256] FAULT_INJECTION: forcing a failure. [ 1080.722256] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.750445] binder: 12866:12867 ioctl c0a85322 20000480 returned -22 [ 1080.782715] binder: 12866:12867 got reply transaction with no transaction stack [ 1080.813609] binder: 12866:12867 transaction failed 29201/-71, size 0-0 line 2801 [ 1080.828868] *** Guest State *** [ 1080.839034] binder: 12866:12870 ioctl c0a85322 20000480 returned -22 [ 1080.845888] CPU: 0 PID: 12864 Comm: syz-executor4 Not tainted 4.20.0+ #2 [ 1080.851931] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1080.852749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1080.870922] Call Trace: [ 1080.873541] dump_stack+0x1db/0x2d0 [ 1080.877185] ? dump_stack_print_info.cold+0x20/0x20 [ 1080.877204] ? percpu_ref_put_many+0x129/0x270 [ 1080.877229] should_fail.cold+0xa/0x15 [ 1080.890708] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1080.890733] ? ___might_sleep+0x1e7/0x310 [ 1080.890754] ? arch_local_save_flags+0x50/0x50 [ 1080.904744] __should_failslab+0x121/0x190 [ 1080.905522] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1080.909007] should_failslab+0x9/0x14 [ 1080.909023] kmem_cache_alloc+0x2be/0x710 [ 1080.909046] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1080.909070] mmu_topup_memory_caches+0x97/0x490 [ 1080.909091] kvm_mmu_load+0x21/0x1200 [ 1080.909111] ? vcpu_enter_guest+0x3f06/0x6520 [ 1080.930681] vcpu_enter_guest+0x3f0e/0x6520 [ 1080.930712] ? emulator_read_emulated+0x50/0x50 [ 1080.930726] ? add_lock_to_list.isra.0+0x450/0x450 [ 1080.930747] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1080.930766] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1080.963120] ? check_preemption_disabled+0x48/0x290 [ 1080.963145] ? __lock_is_held+0xb6/0x140 [ 1080.963169] ? lock_acquire+0x1db/0x570 [ 1080.971821] CR3 = 0x0000000000000000 [ 1080.973699] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 1080.973718] ? lock_release+0xc40/0xc40 [ 1080.973734] ? kvm_gen_update_masterclock+0x380/0x380 [ 1080.973750] ? rcu_sync_dtor+0x170/0x170 [ 1080.973771] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1080.973799] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1080.973825] kvm_vcpu_ioctl+0x558/0x12d0 [ 1080.973872] ? kvm_vcpu_block+0x1010/0x1010 [ 1080.983026] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1080.985665] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1080.985685] ? lock_downgrade+0x910/0x910 [ 1080.985700] ? kasan_check_read+0x11/0x20 [ 1080.985717] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1080.985735] ? rcu_read_unlock_special+0x380/0x380 [ 1080.985776] ? __fget+0x499/0x710 [ 1080.985796] ? iterate_fd+0x4b0/0x4b0 [ 1080.985834] ? kvm_vcpu_block+0x1010/0x1010 [ 1081.000945] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 1081.004786] do_vfs_ioctl+0x107b/0x17d0 [ 1081.004808] ? wait_for_completion+0x810/0x810 [ 1081.004828] ? ioctl_preallocate+0x2f0/0x2f0 [ 1081.004847] ? __fget_light+0x2db/0x420 [ 1081.004864] ? fget_raw+0x20/0x20 [ 1081.004885] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1081.004907] ? fput+0x128/0x1a0 [ 1081.004923] ? do_syscall_64+0x8c/0x800 [ 1081.004949] ? do_syscall_64+0x8c/0x800 [ 1081.004971] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1081.004989] ? security_file_ioctl+0x93/0xc0 [ 1081.023315] ksys_ioctl+0xab/0xd0 [ 1081.023327] __x64_sys_ioctl+0x73/0xb0 [ 1081.023337] do_syscall_64+0x1a3/0x800 [ 1081.023348] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1081.023358] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1081.023369] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1081.023383] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1081.023390] RIP: 0033:0x457ec9 [ 1081.023400] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1081.023405] RSP: 002b:00007f7cd405fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1081.023414] RAX: ffffffffffffffda RBX: 00007f7cd405fc90 RCX: 0000000000457ec9 02:20:52 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1081.023419] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1081.023424] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1081.023429] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7cd40606d4 [ 1081.023434] R13: 00000000004c0e36 R14: 00000000004d2758 R15: 0000000000000006 [ 1081.029613] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1081.134508] binder: 12866:12870 got reply transaction with no transaction stack 02:20:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:20:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xa0, 0x0, &(0x7f00000001c0)=[@acquire_done={0x40106309, r1, 0x4}, @dead_binder_done={0x40086310, 0x3}, @reply_sg={0x40486312, {{0x1, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x50, 0x10, &(0x7f00000000c0)=[@flat={0x736a2a85, 0x100, r2, 0x1}, @fd={0x66642a85, 0x0, r0, 0x0, 0x2}, @fda={0x66646185, 0x0, 0x4, 0x23}], &(0x7f0000000140)=[0x30, 0x38]}, 0x6}}, @acquire_done={0x40106309, r3, 0x1}, @register_looper, @dead_binder_done={0x40086310, 0x1}, @clear_death={0x400c630f, 0x6ea, 0x3}], 0xa1, 0x0, &(0x7f0000000300)="6e6b8df2dc6af5b59ebeecb4f34394944a9e428ce29bae6dd354dd85744bbf893ba84b89b767bef1d7f665bf709777aa74613be8115ad34ca85d427bac4999cab0b65988d2d40b4b71ae04c471a3eb0de78e875bf57d70d5d3550be93db9edf376db8f2d8e86de8c11a359c05859a2d2fe94cdbb44b75d91fbce026a4a73bf6143dbc4811d175241770dbbd448654784b520c78e3c0afdf2536b8efae77cbdfb37"}) [ 1081.265199] binder: undelivered TRANSACTION_ERROR: 29201 [ 1081.271197] binder: 12866:12870 transaction failed 29201/-71, size 0-0 line 2801 [ 1081.291435] binder: undelivered TRANSACTION_ERROR: 29201 [ 1081.362447] binder: 12878:12880 transaction failed 29201/-71, size 0-0 line 2801 [ 1081.385005] binder: 12878:12880 transaction failed 29201/-71, size 0-0 line 2801 02:20:53 executing program 5: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x82000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f00000001c0)=0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x100, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x45, 0x40, 0x9, 0x2, 0x19, 0x6, 0x2, 0x10200000, 0x1, 0x1f, 0xfffffffffffffff9, 0x40}) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) [ 1081.408204] binder: undelivered TRANSACTION_ERROR: 29201 02:20:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff000, 0x4, 0x2012, r0, 0x0) [ 1081.433735] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1081.459528] binder: 12885:12886 transaction failed 29201/-71, size 0-0 line 2801 [ 1081.466969] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1081.482925] binder: undelivered TRANSACTION_ERROR: 29201 [ 1081.535421] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1081.565677] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1081.585911] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1081.594225] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1081.602735] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1081.625873] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1081.635822] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1081.645875] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1081.654180] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1081.660703] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1081.668398] Interruptibility = 00000000 ActivityState = 00000000 [ 1081.675782] *** Host State *** [ 1081.679025] RIP = 0xffffffff811f97e0 RSP = 0xffff888070baf670 [ 1081.685144] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1081.691550] FSBase=00007f465814a700 GSBase=ffff8880ae700000 TRBase=fffffe0000003000 [ 1081.699416] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1081.705446] CR0=0000000080050033 CR3=0000000050ee2000 CR4=00000000001426e0 [ 1081.712466] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff88001360 [ 1081.719906] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1081.726098] *** Control State *** [ 1081.729553] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 1081.736282] EntryControls=0000d1ff ExitControls=002fefff [ 1081.741735] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1081.748786] VMEntry: intr_info=800000f8 errcode=00000000 ilen=00000000 [ 1081.763559] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1081.770222] reason=80000021 qualification=0000000000000000 02:20:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) dup3(r0, r0, 0x80000) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e24, @rand_addr=0x5}, {0x2, 0x4e20, @remote}, 0x90, 0x0, 0x0, 0x0, 0xfffffffffffff89e, &(0x7f0000000080)='erspan0\x00', 0xff, 0x9, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 02:20:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000040)={0x2, 0x0, [], {0x0, @bt={0x3, 0x1, 0x1, 0x2, 0x4, 0x1, 0x0, 0xfffffffffffffffc, 0xe66e, 0x50, 0x0, 0x57a0a8f0, 0x400, 0x3ff, 0xc, 0x20}}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000100)={0xd, 0x97}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000180)={0x1e5, 0x0, [{0x0, 0x1, 0x0, 0x0, @msi}, {0x0, 0x1, 0x0, 0x0, @sint}]}) 02:20:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x400000, 0x4, 0x2012, r0, 0x0) 02:20:53 executing program 4 (fault-call:5 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1081.783576] IDTVectoring: info=00000000 errcode=00000000 [ 1081.789036] TSC Offset = 0xfffffdbaebea222c [ 1081.793355] TPR Threshold = 0x00 [ 1081.796828] EPT pointer = 0x000000004c62201e [ 1081.865272] binder: 12895:12901 transaction failed 29201/-71, size 0-0 line 2801 02:20:53 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1081.910508] binder: 12895:12905 transaction failed 29201/-71, size 0-0 line 2801 02:20:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3003, 0x4, 0x2012, r0, 0x0) [ 1081.956467] binder: undelivered TRANSACTION_ERROR: 29201 [ 1081.967373] FAULT_INJECTION: forcing a failure. [ 1081.967373] name failslab, interval 1, probability 0, space 0, times 0 02:20:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) dup(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) [ 1082.002011] binder: undelivered TRANSACTION_ERROR: 29201 02:20:53 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1082.059280] CPU: 0 PID: 12908 Comm: syz-executor4 Not tainted 4.20.0+ #2 [ 1082.066159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1082.075515] Call Trace: [ 1082.078120] dump_stack+0x1db/0x2d0 [ 1082.081771] ? dump_stack_print_info.cold+0x20/0x20 [ 1082.086807] ? percpu_ref_put_many+0x129/0x270 [ 1082.091411] should_fail.cold+0xa/0x15 [ 1082.095318] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1082.100438] ? ___might_sleep+0x1e7/0x310 [ 1082.104599] ? arch_local_save_flags+0x50/0x50 02:20:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x301e, 0x4, 0x2012, r0, 0x0) [ 1082.104630] __should_failslab+0x121/0x190 [ 1082.104650] should_failslab+0x9/0x14 [ 1082.104664] kmem_cache_alloc+0x2be/0x710 [ 1082.104680] ? __lock_acquire+0x572/0x4a30 [ 1082.104710] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1082.104731] mmu_topup_memory_caches+0x97/0x490 [ 1082.113537] kvm_mmu_load+0x21/0x1200 [ 1082.113552] ? mark_held_locks+0x100/0x100 [ 1082.113566] ? lock_release+0xc40/0xc40 [ 1082.113580] ? mark_held_locks+0x100/0x100 [ 1082.113599] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1082.113621] vcpu_enter_guest+0x3f0e/0x6520 [ 1082.113648] ? emulator_read_emulated+0x50/0x50 [ 1082.113664] ? add_lock_to_list.isra.0+0x450/0x450 [ 1082.157765] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1082.166733] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1082.166751] ? check_preemption_disabled+0x48/0x290 [ 1082.166775] ? __lock_is_held+0xb6/0x140 [ 1082.166794] ? lock_acquire+0x1db/0x570 [ 1082.166810] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 1082.166831] ? lock_release+0xc40/0xc40 [ 1082.166846] ? kvm_gen_update_masterclock+0x380/0x380 [ 1082.166861] ? rcu_sync_dtor+0x170/0x170 [ 1082.166881] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1082.166900] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1082.224037] kvm_vcpu_ioctl+0x558/0x12d0 [ 1082.228128] ? kvm_vcpu_block+0x1010/0x1010 [ 1082.232473] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1082.238027] ? lock_downgrade+0x910/0x910 [ 1082.242188] ? kasan_check_read+0x11/0x20 [ 1082.246351] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1082.251640] ? rcu_read_unlock_special+0x380/0x380 [ 1082.256594] ? __fget+0x499/0x710 [ 1082.260066] ? iterate_fd+0x4b0/0x4b0 [ 1082.260349] FS-Cache: Duplicate cookie detected [ 1082.263882] ? kvm_vcpu_block+0x1010/0x1010 [ 1082.263899] do_vfs_ioctl+0x107b/0x17d0 [ 1082.263919] ? wait_for_completion+0x810/0x810 [ 1082.263950] ? ioctl_preallocate+0x2f0/0x2f0 [ 1082.263975] ? __fget_light+0x2db/0x420 [ 1082.263992] ? fget_raw+0x20/0x20 [ 1082.264014] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1082.264029] ? fput+0x128/0x1a0 [ 1082.264047] ? do_syscall_64+0x8c/0x800 [ 1082.264062] ? do_syscall_64+0x8c/0x800 [ 1082.264079] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1082.264103] ? security_file_ioctl+0x93/0xc0 [ 1082.268828] FS-Cache: O-cookie c=00000000e2363814 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1082.273083] ksys_ioctl+0xab/0xd0 [ 1082.273102] __x64_sys_ioctl+0x73/0xb0 [ 1082.277303] FS-Cache: O-cookie d=00000000869bc68d n=00000000f7fc0829 [ 1082.281637] do_syscall_64+0x1a3/0x800 [ 1082.281657] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1082.281677] ? prepare_exit_to_usermode+0x232/0x3b0 02:20:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="014e4040000000001400000000000000000000000001000000000000000000000000000000000000000000000000000000000e849b4f91ffffff7f00", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) [ 1082.281698] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1082.286188] FS-Cache: O-key=[10] '0200020000807f000008' [ 1082.290055] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1082.290069] RIP: 0033:0x457ec9 [ 1082.290085] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1082.290094] RSP: 002b:00007f7cd405fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1082.290109] RAX: ffffffffffffffda RBX: 00007f7cd405fc90 RCX: 0000000000457ec9 [ 1082.290119] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1082.290135] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1082.293746] FS-Cache: N-cookie c=000000007d6638e5 [p=000000004f092a8c fl=2 nc=0 na=1] [ 1082.299094] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7cd40606d4 [ 1082.299103] R13: 00000000004c0e36 R14: 00000000004d2758 R15: 0000000000000006 [ 1082.334031] binder: 12922:12923 transaction failed 29201/-71, size 0-0 line 2801 02:20:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x4, 0x2012, r0, 0x0) [ 1082.336513] FS-Cache: N-cookie d=00000000869bc68d n=00000000673506fb [ 1082.363710] binder: undelivered TRANSACTION_ERROR: 29201 [ 1082.367510] FS-Cache: N-key=[10] '0200020000807f000008' [ 1082.372610] binder: undelivered TRANSACTION_ERROR: 29201 [ 1082.418828] binder: 12925:12926 unknown command 1077956097 [ 1082.484185] binder: 12925:12926 ioctl c0306201 20000440 returned -22 02:20:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:54 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 02:20:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x300a, 0x4, 0x2012, r0, 0x0) 02:20:54 executing program 4 (fault-call:5 fault-nth:3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:54 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x95', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x600001, 0x0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000080)={0x20, 0x9}) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x7fffffff, 0x2, 0x6, 0x5, 0xbb7b, 0xfffffffffffffffe, 0x8001, 0x9, 0x40, 0x24, 0xfffffffffffffffd}, 0xb) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffff9c, 0xc0106407, &(0x7f00000000c0)={0x0, 0xab}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 02:20:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x7fffdf002000, 0x4, 0x2012, r0, 0x0) [ 1082.931496] FAULT_INJECTION: forcing a failure. [ 1082.931496] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.947479] binder_transaction: 7 callbacks suppressed [ 1082.947489] binder: 12958:12959 got reply transaction with no transaction stack [ 1083.000570] CPU: 1 PID: 12947 Comm: syz-executor4 Not tainted 4.20.0+ #2 [ 1083.007507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1083.016899] Call Trace: [ 1083.019523] dump_stack+0x1db/0x2d0 [ 1083.023543] ? dump_stack_print_info.cold+0x20/0x20 [ 1083.028740] ? percpu_ref_put_many+0x129/0x270 [ 1083.033342] should_fail.cold+0xa/0x15 [ 1083.037243] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1083.042363] ? ___might_sleep+0x1e7/0x310 [ 1083.046522] ? arch_local_save_flags+0x50/0x50 [ 1083.051136] __should_failslab+0x121/0x190 [ 1083.055382] should_failslab+0x9/0x14 [ 1083.059190] kmem_cache_alloc+0x2be/0x710 [ 1083.063376] ? __lock_acquire+0x572/0x4a30 [ 1083.067626] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1083.073182] mmu_topup_memory_caches+0x97/0x490 [ 1083.077899] kvm_mmu_load+0x21/0x1200 [ 1083.081707] ? mark_held_locks+0x100/0x100 [ 1083.085958] ? lock_release+0xc40/0xc40 [ 1083.089955] ? mark_held_locks+0x100/0x100 [ 1083.094210] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1083.099765] vcpu_enter_guest+0x3f0e/0x6520 [ 1083.104109] ? emulator_read_emulated+0x50/0x50 [ 1083.108786] ? add_lock_to_list.isra.0+0x450/0x450 [ 1083.113724] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1083.119271] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1083.124817] ? check_preemption_disabled+0x48/0x290 [ 1083.129846] ? __lock_is_held+0xb6/0x140 [ 1083.133921] ? lock_acquire+0x1db/0x570 [ 1083.137908] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 1083.142956] ? lock_release+0xc40/0xc40 [ 1083.146954] ? kvm_gen_update_masterclock+0x380/0x380 [ 1083.152155] ? rcu_sync_dtor+0x170/0x170 [ 1083.156235] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1083.161087] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1083.166124] kvm_vcpu_ioctl+0x558/0x12d0 [ 1083.170209] ? kvm_vcpu_block+0x1010/0x1010 [ 1083.174548] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1083.180097] ? lock_downgrade+0x910/0x910 [ 1083.184254] ? kasan_check_read+0x11/0x20 [ 1083.188411] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1083.193698] ? rcu_read_unlock_special+0x380/0x380 [ 1083.198648] ? __fget+0x499/0x710 [ 1083.202113] ? iterate_fd+0x4b0/0x4b0 [ 1083.205962] ? kvm_vcpu_block+0x1010/0x1010 [ 1083.210295] do_vfs_ioctl+0x107b/0x17d0 [ 1083.214280] ? wait_for_completion+0x810/0x810 [ 1083.218868] ? ioctl_preallocate+0x2f0/0x2f0 [ 1083.223286] ? __fget_light+0x2db/0x420 [ 1083.227268] ? fget_raw+0x20/0x20 [ 1083.230736] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1083.236279] ? fput+0x128/0x1a0 [ 1083.239570] ? do_syscall_64+0x8c/0x800 [ 1083.243551] ? do_syscall_64+0x8c/0x800 [ 1083.247535] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1083.252131] ? security_file_ioctl+0x93/0xc0 [ 1083.256551] ksys_ioctl+0xab/0xd0 [ 1083.260016] __x64_sys_ioctl+0x73/0xb0 [ 1083.263919] do_syscall_64+0x1a3/0x800 [ 1083.267823] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1083.272759] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1083.277788] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1083.282648] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1083.287843] RIP: 0033:0x457ec9 [ 1083.291046] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1083.309955] RSP: 002b:00007f7cd4080c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1083.317669] RAX: ffffffffffffffda RBX: 00007f7cd4080c90 RCX: 0000000000457ec9 [ 1083.325114] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1083.332395] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1083.339668] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7cd40816d4 02:20:55 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1083.346950] R13: 00000000004c0e36 R14: 00000000004d2758 R15: 0000000000000006 02:20:55 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x95', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0xfcffffffffff0f00) 02:20:55 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000080)={0x8, 0x5}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 02:20:55 executing program 4 (fault-call:5 fault-nth:4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1083.530005] binder: 12971:12973 got reply transaction with no transaction stack 02:20:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x100000000000000) 02:20:55 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r3 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) sendmsg$netlink(r1, &(0x7f0000000200)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x2}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000480)={0x16d8, 0x11, 0x400, 0xa72d, 0x25dfdbfd, "", [@nested={0x1e4, 0x5a, [@generic="fa9cdc785ae222482c0316823cb5e5aa3d81084aa60a1875cf5c4bb533bbf6630aa909f204b4b789f3ea9aad60e30f9448a7fdd5cd659ff85011c043be79ec9f57524209aa5bece86baa5489a085a3553707dec750c069112ca64c2a324ca78af8202dc09a70fcc32cc172207cd8e46af85d8c9503c5848e5bbbe7fe495a490695517544334337c0b74a78edc07d807ab47977a08688fe864502006e51c468ed29fa7eddbf450f2c42c3d4f5da4e41b07e3621d7a3c8415089d0973c669603d8af78cf2ffa8e4f2b98968fcd4ca8af7fc61c798a65d21c209501e09dcb84b54857801980701e0e8e76f62db6cc77b31e", @generic="905bb7c4fdd56b6f1712f909f977d69310d642abc8d599f53d7b882786839e02d80c6dc8fc4dd2f665392046fe7e3fd3d147a784f5383bf467cfe0bbad32761165e5fb002e6534936e5b6b", @generic="81ac186148e69358b7d872e11adf3edd8c214290441b1caa0f6195238b3ae8b536243179069dee667b1b988a1eacdc32ae3cd11d50173e0097a6a8e57756dcb074a21f60f0c924a09ab4ef47fea3b4ba17a1dbb3abd90dbf3501c0d627c1117dec9ba984b928932f1673", @generic="ea8a861cd8aa2224e1d6d05fd6626785e55b614fb8c844dfe1852bcc46a92025a79f2d2d1dd65cbd534738f75c25d10961f16643b00b8ec7"]}, @generic="d81648b4cf1422d1ca711e19e9526716c6eaf476ffe0698f51d39f5a9ea3e770a665e3f5d4886b1731fe3e128f101421762cd6e6a2359b27cc6240ff8f134cad2351248740b2e866bfc6bcd70dcf6d24029fa058bc5a3cde691d", @nested={0x1348, 0x40, [@generic="48a31057b91c25760a5418c30ad9dab9057b25b28c4820c0929e4b09367769be81ca3c917c6d4bb1304e538081b6853ba14086d4d90b299a45078bf40b9f84ae496f84ffe91a3561de7368339efa07fd204c379f9344b814bea1467a7cf9185bb4eb69edcb543a7c41a54064c2e3aab4dc731a1fe80d97437f523b4cefddb8ede4bc8dc96e3c4012ca90036a2b3df1a2715119937e0a91b0e41ca25184156adee437948c4ddfce5a47670d1c", @generic="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", @generic="e640c1c93d4bdae642eeed66e78674432c3f98f5ebcc76a4ef8d2632a9ae15586d82ff515942e06ec6132971b34b293b21a5840be3bd00220cace36faa130d06fa417bf7e1d245ae2fe62d3a443912dbc8a8c46b14b8aea6431fbbb0ea7b8b38ae4c482ee367cd934e156b3049ccb1c5b1f9f5d3197ac69407a8719323d2d6d3f165234fd22465dd0d890cc1fc9e7d817aeabf31d7874bdddbafe3f982255719", @generic="ccb86d5373320a4ce4eb3ce509aa8c8bbdcd7de46cf22f86a713bba29e1f7b43981e3eb9cf1a4e02a7cab6f0455c055acb5504bc03d2566149ce22d2b475fb1c1ad64e0fc4f5b75e9cd7c09da3", @generic="eaec2b3409da55884e69fb7d8dfa083b271edc68e0eda7ac631dbd7aecac0e53096251bdad1e2e565d8d16723cf267d1eb2659e0839608a483da3991bfda72fd90e787139c0d48fa6584e7665929b274ec0220390e9200ed97163470edc2f2a194a5abde963a0b82cbd9779926a067f3c656fabb0d057eb982a27a56fcad0ef35aa9a9bce5abe47f922ad8305b7ac9c5ddee12894b388c6c95f37a55", @typed={0x8, 0xa, @u32=0xfffffffffffffffe}, @typed={0x8, 0x25, @uid=r2}, @generic="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"]}, @generic="f838ac88937dd985742da9abbf7347434b9c7009c96d73c2f2fb084c413f01fd539dc832d8c3dc034079fd44ff3ec9e8814dab605012d6bcbf6fe17f79ee65", @typed={0x8, 0x6b, @ipv4=@empty}, @typed={0x8, 0x25, @pid=r3}, @generic="268cd9c781a4", @generic="af76adc98ad1e76eb73bcad0f5c784367e08f666adf2ff1e02c84c81b0d403e6790ce082f43635cb4dc1574f0997bb713862568e91e7273b7aa9780f4cce23054b7964a09c0fd17d7752b91e2ccd8caa52c1e8bba68165828d1e2f9d2eb04fda86ff7fc58aad2d37248338735035b33faf8a9cc277ac367d3d47d4b02625cbf33bdb1a44ad3d0375ebd7cad3fdc797e6b3114b19ee4341801d0ffe9fe909aa68e7445c4b823312749b95f3f4ba8d11365c28ee83a558cd66a2ecf55956b5aeed05ecca2c64c60a05dfec6626146a652f71f7bacf9b5172b0b6f5a2bcaa4e81b24f0677", @typed={0x8, 0xf, @pid=r4}]}, 0x16d8}, {&(0x7f0000001b80)={0x1128, 0x32, 0x4, 0x70bd27, 0x25dfdbfd, "", [@generic="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", @generic="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", @nested={0x18, 0x8f, [@typed={0x8, 0x57, @u32=0x401}, @typed={0xc, 0x29, @u64=0x4c1}]}]}, 0x1128}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000003b501a41d4f391e2aa358ebda8978849909d6cf5a4b4d959dc5ce252a36d9c3a77ce516ad1ea8536276ca5114bd38f2188f18311bee09788e58d30ca8ac7b95ebb70b0af37ff6e120ed91975d8acf1bd234e73fc9c78235f865cce7dfdbeb8b299f93868ab997b51919a22f124ff4f6049"], 0x18, 0x850}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) socket$l2tp(0x18, 0x1, 0x1) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x5610, 0x4) socket$tipc(0x1e, 0x5, 0x0) 02:20:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x2000000) [ 1083.783089] binder: 12994:12995 got reply transaction with no transaction stack [ 1083.816960] binder: 12994:12997 got reply transaction with no transaction stack [ 1083.827114] FS-Cache: Duplicate cookie detected 02:20:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1083.832093] FS-Cache: O-cookie c=0000000069c10667 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1083.840858] FS-Cache: O-cookie d=00000000869bc68d n=000000000845f03b [ 1083.847694] FS-Cache: O-key=[10] '0200020000807f000008' [ 1083.853543] FS-Cache: N-cookie c=00000000fab184fc [p=000000004f092a8c fl=2 nc=0 na=1] [ 1083.861718] FS-Cache: N-cookie d=00000000869bc68d n=00000000e62e9793 [ 1083.868364] FS-Cache: N-key=[10] '0200020000807f000008' 02:20:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000140)={0x67446698, 0x0, 0x2, 0x1, 0x1, "ca181f7e6c65f7a3b8394d1e445c5142c66c7448829fc3c5e81da83c0dc95df3de32b577f166ea5d31779dba739fcbc4bb4f88a15a99a18b73ba78b2efcb3c7e73031894f7e0b380356e39961179fdf36d823d0d1c06688fe951b8250ff8c2296022a670727bd81b62d25bba840d2ecb706177304d2aed60dcf6fedac0d51f90ed35a46d55aab3bc597d3f4387fe1b15d2a56b938983ced665d8ac3c3d009da4457487920dc881e4ff2c0beba2fb78759a936623bf5f9e8eb81097407e56162926429755ee4b8ca8a7fd059b6cf072"}, 0xdf) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000300)={0x2, &(0x7f0000000240)=[{}, {}]}) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000000c0)={0x1, 0x23c}, 0x2) write$P9_RCLUNK(r2, &(0x7f0000000080)={0x7, 0x79, 0x2}, 0x7) 02:20:55 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\xff', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x300) [ 1084.010794] binder: 13009:13010 got reply transaction with no transaction stack [ 1084.035882] binder: 13009:13010 got reply transaction with no transaction stack 02:20:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) r1 = syz_open_pts(0xffffffffffffffff, 0x10040) ioctl$KDMKTONE(r1, 0x4b30, 0x1) 02:20:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x400000) [ 1084.158468] binder: 13020:13021 got reply transaction with no transaction stack [ 1084.187335] binder: 13020:13021 got reply transaction with no transaction stack 02:20:56 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) [ 1084.292914] binder: 13030:13031 got reply transaction with no transaction stack [ 1084.353241] binder_transaction: 9 callbacks suppressed [ 1084.353260] binder: 13030:13031 transaction failed 29201/-71, size 0-0 line 2801 [ 1084.394524] binder: 13030:13033 got reply transaction with no transaction stack [ 1084.423894] binder: 13030:13033 transaction failed 29201/-71, size 0-0 line 2801 02:20:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x2) 02:20:56 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:56 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\xff', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0163404000000000750099fb0351eb19ea4538f6aa000000150000000000000000000000009600000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000300)={r2, r2, 0x7fff, 0xec, &(0x7f0000000180)="0058dc93002f941aaaf4f9342dc0115c84ddfc6c203d930babb98bc75b53aab07409a674fcd9d5763aaacebb8ef253b3a249a21eb1bcc98a6760b09f94a5591ec316dc55cbb284752312c8bfe1ecb5fd884f7f472a309c75b52197cb8c1d0e715f1c361834d209f133edb2286c6360cda9f20ad2eb6b1f2d145ca2a08f6ed02d8161d19fcbb68f79e438336e59af2490217989aeff4ce3281fa9837a3ba7db0afe5f9b6462597faa450cd3e47b3fc67441d3736177189fc3d5631268c03652df258ff4da69c1960a2567088a9447edf21919ca7a8893c8d701fd418b1bbdceb37796803795d370d06ab03e16", 0x9, 0x8, 0x800, 0x66ad, 0x7f, 0x2, 0xffffffff, 'syz0\x00'}) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) r3 = dup(r2) ioctl$RTC_UIE_OFF(r3, 0x7004) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80400, 0x0) connect$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) 02:20:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) [ 1084.596306] binder: 13037:13039 transaction failed 29201/-71, size 38400-0 line 2801 02:20:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0xffffffffffffc) [ 1084.707170] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1084.742055] Dead loop on virtual device ip6_vti0, fix it urgently! 02:20:56 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1084.792546] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1084.821802] Dead loop on virtual device ip6_vti0, fix it urgently! 02:20:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1084.845076] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1084.857126] Dead loop on virtual device ip6_vti0, fix it urgently! 02:20:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0xa00000000000000) [ 1084.967220] FS-Cache: Duplicate cookie detected [ 1084.972103] FS-Cache: O-cookie c=0000000072bd290e [p=000000004f092a8c fl=222 nc=0 na=1] [ 1084.980627] FS-Cache: O-cookie d=00000000869bc68d n=00000000c6690fd7 [ 1084.987443] FS-Cache: O-key=[10] '0200020000807f000008' [ 1084.993200] FS-Cache: N-cookie c=00000000bc3bc348 [p=000000004f092a8c fl=2 nc=0 na=1] [ 1085.001299] FS-Cache: N-cookie d=00000000869bc68d n=00000000c09ad663 [ 1085.008039] FS-Cache: N-key=[10] '0200020000807f000008' 02:20:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x1e000000) 02:20:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) 02:20:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x1000000) 02:20:57 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1085.275744] binder: BINDER_SET_CONTEXT_MGR already set [ 1085.287100] binder: 13037:13047 ioctl 40046207 0 returned -16 [ 1085.307912] binder: 13037:13039 transaction failed 29201/-71, size 38400-0 line 2801 02:20:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0xa00) 02:20:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0163404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c631a082df0e9717f2b4e6ee8f859f5de07730fd48a1f1b11eb3af39eea3ab16c39858e90ae8240e846b7f7c965792307a7a4379dafba2bc32fa966d89a89ea4ecf4e05c07e90fa7110e18d0fac159ba2c10d3ac60592a904c540f678d260c202cb2d317e828c", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) [ 1085.356354] binder_release_work: 10 callbacks suppressed [ 1085.356361] binder: undelivered TRANSACTION_ERROR: 29201 [ 1085.393436] binder: undelivered TRANSACTION_ERROR: 29201 02:20:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x1e) 02:20:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0163404000000000750099fb0351eb19ea4538f6aa000000150000000000000000000000009600000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000300)={r2, r2, 0x7fff, 0xec, &(0x7f0000000180)="0058dc93002f941aaaf4f9342dc0115c84ddfc6c203d930babb98bc75b53aab07409a674fcd9d5763aaacebb8ef253b3a249a21eb1bcc98a6760b09f94a5591ec316dc55cbb284752312c8bfe1ecb5fd884f7f472a309c75b52197cb8c1d0e715f1c361834d209f133edb2286c6360cda9f20ad2eb6b1f2d145ca2a08f6ed02d8161d19fcbb68f79e438336e59af2490217989aeff4ce3281fa9837a3ba7db0afe5f9b6462597faa450cd3e47b3fc67441d3736177189fc3d5631268c03652df258ff4da69c1960a2567088a9447edf21919ca7a8893c8d701fd418b1bbdceb37796803795d370d06ab03e16", 0x9, 0x8, 0x800, 0x66ad, 0x7f, 0x2, 0xffffffff, 'syz0\x00'}) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) r3 = dup(r2) ioctl$RTC_UIE_OFF(r3, 0x7004) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80400, 0x0) connect$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) [ 1085.518910] binder: 13092:13093 transaction failed 29201/-71, size 0-0 line 2801 [ 1085.549155] binder: undelivered TRANSACTION_ERROR: 29201 02:20:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5452, 0x0) 02:20:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x1e00000000000000) [ 1085.639709] binder: 13101:13102 transaction failed 29201/-71, size 38400-0 line 2801 [ 1085.742914] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1085.764167] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1085.794788] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1085.841136] Dead loop on virtual device ip6_vti0, fix it urgently! 02:20:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="030205000000000500677f6745cf0e517b696880d454d714162c9bc1ef9e16da6c6953da6255788910b202046ce935c82243d349a3fb3e17cce9bb52310cda4fe9c3410d05938b73642e6ad12e3a6c29d18c22f8d0bd0201a8b253b6ef53780111cbb651479770f695e836e7b16fc11bb4"], 0x71, 0x2) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="016340400000001800000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 02:20:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x8000000000000000) 02:20:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) 02:20:57 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1085.991876] binder: 13116:13117 transaction failed 29201/-71, size 2097152-0 line 2801 02:20:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0xa000000) [ 1086.032417] binder: undelivered TRANSACTION_ERROR: 29201 [ 1086.050746] binder: 13116:13117 transaction failed 29201/-71, size 2097152-0 line 2801 [ 1086.064220] binder: undelivered TRANSACTION_ERROR: 29201 02:20:57 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) [ 1086.087434] binder: undelivered TRANSACTION_ERROR: 29201 02:20:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x1f000000) [ 1086.208877] binder: 13137:13138 transaction failed 29201/-71, size 0-0 line 2801 [ 1086.227976] FS-Cache: Duplicate cookie detected [ 1086.232897] FS-Cache: O-cookie c=0000000054a24e70 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1086.241574] FS-Cache: O-cookie d=00000000869bc68d n=0000000069ef7f7b [ 1086.248568] FS-Cache: O-key=[10] '0200020000807f000008' 02:20:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) 02:20:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x4000) [ 1086.254529] FS-Cache: N-cookie c=0000000051dee04d [p=000000004f092a8c fl=2 nc=0 na=1] [ 1086.262652] FS-Cache: N-cookie d=00000000869bc68d n=0000000078714796 [ 1086.264351] binder: undelivered TRANSACTION_ERROR: 29201 [ 1086.269436] FS-Cache: N-key=[10] '0200020000807f000008' 02:20:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x22b, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba83a0c2aa966db433df47047cc6d1db15d76e7c02caa2b7c1552d88698d71b506b2ab393dcf4d499b6cd086", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) [ 1086.380633] binder: 13148:13149 transaction failed 29201/-71, size 0-0 line 2801 [ 1086.402608] binder: undelivered TRANSACTION_ERROR: 29201 02:20:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0x0, &(0x7f0000000280)}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x1e00) 02:20:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x44010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x34, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="046304400000000003630840", @ANYRES64=r1, @ANYBLOB="04630140230000000c4900000663044001000000000000000000000000000000e053cc712a7ff2b3c624258a770074a82286"], 0xc8, 0x0, &(0x7f0000000080)="72714159e8bcaa1de6a9a67909446a886cf084515068480d6097cef5b6c8bad4852c2e69e65a465aa751f71e044ee7aba810cae60ebd8e38259531c96150d68b23e1afc8c4604e12c475d138b2b4ad61fcfdef0bf357551db897d553122ee026bff3c9a636e0d0a330da22b2669a3b2462fd28fee6f88107a68990c5dcdc0af8e9995b1355eb2196f950316caf435a4126dd65fb249895c8c83d5df3ac8cc7f2ec9ed8270affb5d4f15f176aa5121f7587aa295f2e0b0921cc12563b6f15e38c2bfb72f89ca1e0cc"}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x800, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000240)) getgroups(0x4, &(0x7f00000001c0)=[0xffffffffffffffff, 0xee01, 0xee01, 0xee00]) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000700)='/dev/mISDNtimer\x00', 0x4200, 0x0) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000680)=""/58) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x2) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000480)=0x0, &(0x7f00000004c0)) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndmidi(&(0x7f00000006c0)='/dev/snd/midiC#D#\x00', 0x6, 0x400000) r9 = getgid() getgroups(0x6, &(0x7f00000005c0)=[r3, r5, r6, r7, r8, r9]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 02:20:58 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\xfe', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) 02:20:58 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x3000000) [ 1086.853813] binder: 13166:13169 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1086.861579] binder: 13166:13169 BC_FREE_BUFFER uffffffffffffffff no match [ 1086.861593] binder: 13166:13169 unknown command 1073832708 [ 1086.861609] binder: 13166:13169 ioctl c0306201 20000180 returned -22 [ 1086.938682] binder: 13166:13174 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1086.970902] binder: 13166:13174 BC_FREE_BUFFER uffffffffffffffff no match 02:20:58 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\t', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1086.986473] binder: 13166:13174 unknown command 1073832708 [ 1086.993734] binder: 13166:13174 ioctl c0306201 20000180 returned -22 02:20:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x1f00) 02:20:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01634040000000000000000000070000000000e4ff000000000000000000000000000003000000000000000000000000000000000000000000000000834ed592dfadcf8027d03076adb40c779fb4ca0afc8b71a1e100e48e6bc71daff16deb7749b850709970ea1ea5c0dfa62f620f2442b8d372885f6977ccb3682964961b68cc4dd6eb029923dfeb95c7d38249ec7735ee11a2b2", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 02:20:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) [ 1087.121540] binder: undelivered TRANSACTION_ERROR: 29201 [ 1087.131401] binder: undelivered TRANSACTION_ERROR: 29201 02:20:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={r1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 02:20:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0x51, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd7"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:20:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0xa) 02:20:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 02:20:59 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:59 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\xfe', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) 02:20:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x3) 02:20:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = syz_open_dev$usb(&(0x7f00000015c0)='/dev/bus/usb/00#/00#\x00', 0x1, 0x214002) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001600)=[@in6={0xa, 0x4e22, 0x3, @empty, 0x3f}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x20, @mcast2}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @remote}], 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 02:20:59 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:20:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x300000000000000) 02:20:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x400) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffffffffffce6, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01630600000000000000000000000000000000800000000000000000000000000000000000000000000000000000a3c606b3ba22d8cb6c94c53d0415de1a09aa9f3f8891ebe303eb11f1f7159a970911e4123bf0e16f8295caab6825ac6ecd25a90f24678f5d902756e4c9c9b28a5b5186ace9351892aa246ce4b3e812971078f3a68839123c91092bfbc9252a50c36e8a5fb0eb38774829441f383516035b89180409416f78fe2a7cf451", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) [ 1087.935989] FS-Cache: Duplicate cookie detected [ 1087.940882] FS-Cache: O-cookie c=0000000003244eb6 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1087.950345] FS-Cache: O-cookie d=00000000869bc68d n=000000003262a002 [ 1087.956975] FS-Cache: O-key=[10] '0200020000807f000008' [ 1087.962488] FS-Cache: N-cookie c=00000000d6fbf06a [p=000000004f092a8c fl=2 nc=0 na=1] [ 1087.970764] FS-Cache: N-cookie d=00000000869bc68d n=00000000f3ac5fcb [ 1087.977428] FS-Cache: N-key=[10] '0200020000807f000008' 02:20:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5421, 0x0) 02:21:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0x79, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x141000, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000080)=0x1) 02:21:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x1f00000000000000) 02:21:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5450, 0x0) 02:21:00 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:00 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x400000000000) [ 1088.614230] binder_transaction: 14 callbacks suppressed [ 1088.614239] binder: 13258:13262 got reply transaction with no transaction stack [ 1088.646596] FS-Cache: Duplicate cookie detected [ 1088.651428] FS-Cache: O-cookie c=00000000a30df661 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1088.659993] FS-Cache: O-cookie d=00000000869bc68d n=00000000637d27a5 [ 1088.666718] FS-Cache: O-key=[10] '0200020000807f000008' [ 1088.672666] FS-Cache: N-cookie c=000000004a9b8f54 [p=000000004f092a8c fl=2 nc=0 na=1] [ 1088.681053] FS-Cache: N-cookie d=00000000869bc68d n=0000000048e6d333 [ 1088.687765] FS-Cache: N-key=[10] '0200020000807f000008' 02:21:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) statx(r1, &(0x7f0000000100)='./file0\x00', 0xc00, 0x1, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="e4623e0000fb3593cd2b9cce22ef25a257965e60e40032c54303a89824b9d9f5a69d579ac958518cd3823be41e94ffa3e9de945baefb863a2bd00976c97895cce66b80820bc4a99452b6942860b568f60000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000240)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x0, r2}) 02:21:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0x79, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x200000000000000) 02:21:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) [ 1088.872273] binder: 13279:13282 unknown command 4088548 [ 1088.895321] binder: 13279:13282 ioctl c0306201 20000440 returned -22 02:21:00 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x6, 0x200040) io_setup(0xfffffffffffffff9, &(0x7f00000001c0)=0x0) io_cancel(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xd20d, r0, &(0x7f00000003c0)="e9a15e2dcc8fb3d96a0a383cf21cf9243397ce020f88b767c19a0cfc4bbd96d460e437c5ee6d80bcf704a02ed4ceed41650dae8bb38c89d99c6e2891e3a7a93a4a3605b17edd686d8a102c14e98efe0b9150c2eaa890594f8f168f42b28438830e224be5c9d8254b3656def1b826910f040935b0e6fe0834e53fe54a8554f4b83ad743368795ae4caeb6211b07b18ffbc46468c66bdc170260d1675d02cf1cc328470036", 0xa4, 0x4328128f, 0x0, 0x4, 0xffffffffffffff9c}, &(0x7f0000000380)) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r2, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f00000000c0)=""/242) [ 1088.917318] binder: 13279:13282 ioctl 5429 20000240 returned -22 [ 1088.960822] binder: 13279:13287 unknown command 4088548 [ 1088.989822] binder: 13279:13287 ioctl c0306201 20000440 returned -22 [ 1089.022420] binder: 13279:13282 ioctl 5429 20000240 returned -22 02:21:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) 02:21:00 executing program 2: getgroups(0x4, &(0x7f0000000000)=[0xffffffffffffffff, 0xee01, 0x0, 0xee00]) getgroups(0x5, &(0x7f0000000080)=[0xee00, 0x0, 0xee00, 0xffffffffffffffff, 0xee00]) r2 = getegid() getgroups(0x3, &(0x7f00000000c0)=[r0, r1, r2]) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x1010, r3, 0x0) 02:21:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x2, 0xc6c, 0xffffffff, 0x5, 0x10, 0x2, 0x7, 0xc86a, 0xfe4, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) [ 1089.126973] binder: 13297:13298 got reply transaction with no transaction stack 02:21:00 executing program 5: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c, 0x80000) pwrite64(r0, &(0x7f0000000280)="cfde38ba2af5b2012c9ba4148fd9277ade82f2eecc415a0bc4f74871f1a4cb20b8a935ed23c9349b744f3cc69aa89dc229ccd4ae8d0849eb00d5617a2fd3b874ebe0d5aa1f3f98ab63c36bc48d7a3b89ae69a1038dd2eb16babd8e8dec8dae6524e771ed20604be6601c469b8946b67e7460b82013e7d8d5b06671181207c242f00f18062cd4d91dbd30465c6cebafe6bc1dd83d39a3f8d04a913de38b767aa015775cb8d2772d8320ca7b05168a4490c9aa8c5360bf454c3c31945fdf7432ccd2", 0xc1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e1f, @local}, 0x37c) write$binfmt_elf64(r2, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x8034}, 0x100) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) [ 1089.177250] binder: 13297:13298 got reply transaction with no transaction stack 02:21:01 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0x5}, 0x1) 02:21:01 executing program 0: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x103600, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="016340400000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x92, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000180)={0x1, 0x2}) 02:21:01 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1089.356351] binder: 13315:13318 got reply transaction with no transaction stack [ 1089.443438] binder_transaction: 9 callbacks suppressed [ 1089.443467] binder: 13315:13318 transaction failed 29201/-71, size 0-0 line 2801 [ 1089.449949] FS-Cache: Duplicate cookie detected [ 1089.461221] FS-Cache: O-cookie c=0000000038f28dd5 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1089.461397] binder: 13315:13318 ioctl c0306201 20000440 returned -14 [ 1089.469633] FS-Cache: O-cookie d=00000000869bc68d n=00000000137691a4 [ 1089.482663] FS-Cache: O-key=[10] '0200020000807f000008' [ 1089.489430] FS-Cache: N-cookie c=00000000520d2b4e [p=000000004f092a8c fl=2 nc=0 na=1] [ 1089.497603] FS-Cache: N-cookie d=00000000869bc68d n=0000000088d2831e [ 1089.504270] FS-Cache: N-key=[10] '0200020000807f000008' [ 1089.513837] binder: 13315:13326 got reply transaction with no transaction stack [ 1089.521311] binder: 13315:13326 transaction failed 29201/-71, size 0-0 line 2801 [ 1089.531805] binder: 13315:13326 ioctl c0306201 20000440 returned -14 02:21:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0x8d, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd08"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 02:21:01 executing program 2: inotify_init() r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000080)={0xeb}) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x10) fcntl$setstatus(r0, 0x4, 0x80000000002a00) ioctl$KDSKBLED(r1, 0x4b65, 0x5) 02:21:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x7c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="03630840", @ANYRES64=r1, @ANYBLOB="056304400000000000634040020000000000000002000000000000000000000010000000000000000000000018000000000000001800000000000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="0000000074917efb64382129be6b9aa18657b50000000000000002359b37d493a6c84adf7efebd79513f2aecc4c0f6ae5879ebb29aa57374bf0bfcb00f80635f39480975c22b51860490456a4d9e80a3c6c021e254a01182cbe7b504388da8185dd6df58ae0e"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000084000000000000000000000000000000"], @ANYBLOB="08631040", @ANYRES64=r2, @ANYBLOB="02000000000000000e630c40010000000100000000000000"], 0x23, 0x0, &(0x7f00000001c0)="c69dde24cb357ffcea558b1adc1d39acdb79722d8da91b44b01a7ccb08850408a77395"}) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x200, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, {0xa, 0x4e21, 0xf83, @loopback, 0x97}, r4, 0x3}}, 0x48) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) [ 1089.723280] binder: 13329:13330 BC_FREE_BUFFER u0000000000000000 no match [ 1089.733977] binder: 13329:13330 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1089.739165] binder: 13332:13333 ioctl 4040ae77 20000080 returned -22 [ 1089.762836] binder: 13329:13330 got transaction to invalid handle [ 1089.776614] binder: 13329:13330 transaction failed 29201/-22, size 24-24 line 2896 [ 1089.797785] binder: 13332:13339 ioctl 4040ae77 20000080 returned -22 [ 1089.810818] binder: 13329:13338 BC_FREE_BUFFER u0000000000000000 no match [ 1089.823926] binder: 13329:13338 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1089.831893] binder: 13329:13338 got transaction to invalid handle [ 1089.862532] binder: 13329:13338 transaction failed 29201/-22, size 24-24 line 2896 02:21:01 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x8000) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000080)=0x204) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r1, 0x0) [ 1089.882498] binder: 13329:13343 got reply transaction with no transaction stack [ 1089.898968] binder: 13329:13343 transaction failed 29201/-71, size 0-0 line 2801 02:21:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 02:21:01 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xd}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd61d}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x54}, 0x1, 0x0, 0x0, 0x11}, 0x8000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:21:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) r1 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xd4, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000000)=[@flat={0x77682a85, 0xb, r1, 0x4}], &(0x7f0000000080)=[0x48]}, 0xfffffffffffffffa}}, @decrefs, @increfs_done={0x40106308, r2, 0x1}, @clear_death={0x400c630f, 0xff, 0x3}, @clear_death={0x400c630f, 0x0, 0x3}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x18, 0x20, &(0x7f0000000100)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x100000001}], &(0x7f0000000140)=[0x38, 0x0, 0x78, 0x38]}, 0x1}}], 0x1000, 0x0, &(0x7f0000000480)="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"}) 02:21:01 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1090.110711] binder: 13358:13359 got reply transaction with no transaction stack [ 1090.184250] binder: 13358:13359 transaction failed 29201/-71, size 0-0 line 2801 [ 1090.184665] binder: 13358:13366 got transaction to invalid handle [ 1090.193808] FS-Cache: Duplicate cookie detected [ 1090.202960] FS-Cache: O-cookie c=000000000a6af345 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1090.211621] FS-Cache: O-cookie d=00000000869bc68d n=000000005fd150ca [ 1090.218491] FS-Cache: O-key=[10] '0200020000807f000008' [ 1090.224465] FS-Cache: N-cookie c=00000000b0b6a5d7 [p=000000004f092a8c fl=2 nc=0 na=1] 02:21:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10800, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000080)=0x6, 0x4) [ 1090.232611] FS-Cache: N-cookie d=00000000869bc68d n=0000000091137bcd [ 1090.239509] FS-Cache: N-key=[10] '0200020000807f000008' 02:21:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) [ 1090.296931] binder: 13358:13366 transaction failed 29201/-22, size 24-8 line 2896 [ 1090.308648] binder: 13358:13359 got reply transaction with no transaction stack [ 1090.317177] binder: 13358:13359 transaction failed 29201/-71, size 0-0 line 2801 [ 1090.325311] binder: 13358:13372 got transaction to invalid handle [ 1090.331821] binder: 13358:13372 transaction failed 29201/-22, size 24-8 line 2896 02:21:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0x97, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2010, r0, 0x0) 02:21:02 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in=@loopback, @in6=@local, 0x4e23, 0x59, 0x4e20, 0x0, 0xa, 0x20, 0xa0, 0x3f, r1, r2}, {0x80, 0xfffffffffffffffc, 0x6f, 0x3, 0x5, 0x8, 0x40, 0x6}, {0x3, 0x6, 0x6, 0x8000000000000000}, 0x2, 0x6e6bb2, 0x2, 0x1, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x3f}, 0x2, @in6=@loopback, 0x3502, 0x3, 0x3, 0x0, 0x400, 0x5, 0x3}}, 0xe8) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000480)={0x0, @reserved}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 02:21:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x2, 0x0) [ 1090.615278] binder: 13381:13383 got reply transaction with no transaction stack [ 1090.644810] binder: 13381:13383 transaction failed 29201/-71, size 0-0 line 2801 02:21:02 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:02 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@loopback, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @multicast2, r1}, 0xc) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r0, 0x10}, {r0, 0x20}, {r0}], 0x3, &(0x7f00000002c0)={r2, r3+10000000}, &(0x7f0000000300)={0x10001}, 0x8) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000200)='em1', 0x3) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x5151, r4, 0x0) [ 1090.661931] binder: 13381:13390 got reply transaction with no transaction stack [ 1090.675078] binder_release_work: 14 callbacks suppressed [ 1090.675085] binder: undelivered TRANSACTION_ERROR: 29201 [ 1090.703136] binder: undelivered TRANSACTION_ERROR: 29201 02:21:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x15, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01634040000000000000000000d9522dc0c661611dc9000000201f000000000002000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 02:21:02 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4001fc, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={0x0}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={r2, 0x2}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRESDEC=r0], 0x2) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r2, 0x1ff}, &(0x7f00000002c0)=0x8) read(r0, &(0x7f0000367fe4)=""/91, 0x275) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @loopback, @remote}, &(0x7f00000001c0)=0xc) ioctl$TCFLSH(r1, 0x540b, 0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_getaddr={0x30, 0x16, 0x700, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x20, 0xc8, r4}, [@IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x4890) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000100)={0x1, 0x4, 0xfffffffffffffffd}) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000340)={'bridge0\x00', @local}) socket$inet_smc(0x2b, 0x1, 0x0) [ 1090.818117] binder: undelivered TRANSACTION_ERROR: 29201 02:21:02 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000080)={0x7, 0x0, 0x4, 0x3, 0x5}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 02:21:02 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) close(r3) close(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000180)="0adc1f023c12cb8f1a3ca42bfb05cde668372705728c8fddb2232463c46e514fc686f7e0061d2b72e4999935d741a21099d200000000000000000000000000000000") write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="89"], 0x1) accept4$packet(r3, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001740)=0x14, 0x80800) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000001780)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, @local, 0xfffffffffffffff8, 0x6, 0xdd, 0x100, 0x2, 0x40000000, r5}) 02:21:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5451, 0x0) [ 1090.951982] binder: undelivered TRANSACTION_ERROR: 29201 02:21:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) fallocate(r0, 0x1, 0x95b8, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) [ 1091.075173] binder: undelivered TRANSACTION_ERROR: 29201 [ 1091.081162] binder: undelivered TRANSACTION_ERROR: 29201 02:21:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0x9c, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1ed"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:03 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000040)={0x3, 0xfffffffffffffff8}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) r1 = add_key(&(0x7f0000000100)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$negate(0xd, r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x81, "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", 0x0, 0x4a90509c, 0x7, 0x5, 0x5, 0x0, 0x9, 0x1}}}, 0x128) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x450, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000000080000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b2, &(0x7f0000000180)=0x0) munmap(&(0x7f0000364000/0x2000)=nil, 0x2000) io_submit(r3, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xf0000000000000, 0x800000000000000, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) 02:21:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x1010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x5c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="a49adb4eead8890ba9fe9364cc9700000000", @ANYRES64=r1, @ANYBLOB="020000000000000000634040040000000000000003000000000000000000000010000000000000000000000050000000000000003800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000001000000000000002a00000000000000852a747000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000000000000000000000e00000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="4800000000000000180000000000000038000000000000000000000000000000280000000000000048000000000000000000000000000000"]], 0x0, 0x0, 0x0}) 02:21:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x40049409, 0x0) 02:21:03 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x03', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1091.460018] binder: 13429:13430 unknown command 1323014820 [ 1091.488336] binder: 13429:13430 ioctl c0306201 20000000 returned -22 [ 1091.538461] binder: 13429:13441 unknown command 1323014820 [ 1091.560484] binder: 13429:13441 ioctl c0306201 20000000 returned -22 02:21:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, &(0x7f0000000080)="65777e394e92c0cd7b5e2b8da76d636f12d64678ed1d5f5268eeabe429d74e37dff13dfc48cab6e8e6e49fb8d5e5a3fc9cb85a4a59e9a91257d238d7950d88cc83f521cfdd7f99890ec0b1230852f083540a6f0a98f7e5a98e0e935217948f2346d8fb4349314ab301ab8b28154f921ed1c6da3f7d1a8b9e05151b5b9b436db4ff8cd3f49c090ab43c045b6291d074ccf355addb0ee904e72796fde1572ccc7c544ca61ec2842b", &(0x7f0000000140)=""/187}, 0x18) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:21:03 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:03 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200041, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x84, "b1d61b03605ca11df3b2494abe948e65eb16d87640a3198ec6c4bff9cce007ffc29168517ddbaeef39629dfacc142674a9f27e05b0dfe39d35bacaa754be529881486b19d2240f4eda3cd280ee9980857264868e60448a9dd22da5ac5845070acf82a83efb4aba1914186a074080965c253c9407b102c991b1b9d26ec5a64e9392c1b911"}, &(0x7f0000000140)=0x8c) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180)={r1, 0xe7, "62322cdf38438cb83a08903e065e11c7dfdec0ff7ddfdb68ba280f2933b5768a6eacb91dbe0208f3b1d1fab58089d30849c3c599346256c1e32cb1d33bad4d4dfd33e95fa4588de53fa45f24ea10599cee4e6d134059faa8825946378bc9f14937641ae610cd1c6e7bd152c6b9584ff546ed979da31a6595e6a32620832cf94cd68b067dd0962646e513f3e41048603dfe590802f9474c594da649a3f6602af87836dee49f6a18cd5f22e1524114af3e55e2346e01fc969a4cdf19c0fd681980adf75c63920ac8010b27f33a6efb75d4cc2e1f6a37d2d301fd8c1ca5ca8da3d6ccce525abb1080"}, &(0x7f0000000300)=0xef) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="016340400000000000000000000000000077cd3eb9000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 02:21:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) 02:21:03 executing program 0: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x6, 0x101000) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) time(&(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xc, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES64=r1], 0x0, 0x0, 0x0}) [ 1091.819747] binder: undelivered TRANSACTION_ERROR: 29201 [ 1091.851658] binder: undelivered TRANSACTION_ERROR: 29201 [ 1091.951675] binder: 13464:13465 unknown command 1074292739 [ 1091.959122] binder: 13464:13465 ioctl c0306201 20000440 returned -22 02:21:03 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x8000000007fe) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x5) [ 1092.010880] binder: 13464:13468 unknown command 1074292739 [ 1092.049660] binder: 13464:13468 ioctl c0306201 20000440 returned -22 02:21:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) 02:21:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0x9f, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d3"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x301000, 0x0) connect$rxrpc(r1, &(0x7f00000003c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x100, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}}, 0xff7d) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=@newtfilter={0x2dc, 0x2c, 0x200, 0x70bd2d, 0x25dfdbfb, {0x0, r2, {0x1c, 0x1f}, {0x0, 0xffff}, {0xfff7, 0x1}}, [@TCA_RATE={0x8, 0x5, {0x3, 0xfffffffffffff801}}, @TCA_CHAIN={0x8, 0xb, 0xd45}, @filter_kind_options=@f_route={{0xc, 0x1, 'route\x00'}, {0x84, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xf, 0x7}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x5b}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xd4}, @TCA_ROUTE4_IIF={0x14, 0x4, 'bcsf0\x00'}, @TCA_ROUTE4_ACT={0x54, 0x6, @m_connmark={0x50, 0x0, {{0x10, 0x1, 'connmark\x00'}, {0x20, 0x2, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0xffffffffffff0000, 0xf, 0x1, 0x4}}}}, {0x18, 0x6, "55e8ea1053e1fd29b715777871b18e9ed775"}}}}]}}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x1f0, 0x2, [@TCA_BPF_OPS_LEN={0x8, 0x4, 0x3}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xf4, 0x1, @m_ipt={0xf0, 0x2, {{0x8, 0x1, 'ipt\x00'}, {0x30, 0x2, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x14, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0xb0, 0x6, "be890fa7c595d4d2635d31287ea5edd82ec4cf7f3b3cbf6631ba6523d9c4ab437a3e37f462cde679b966af197245adc080eb689c31708059216b9635a13bfaaed6fb993dc5a95c0701602f84badcfa2c6ab95a3525c7780e342015e4212eca5a7aece50615ed350487f176823f25435c853277c40f919554f86777e4cdf731053254079be813b20e93364ef7ecbe2ea4079e943e9eb5b7af18f5f81824d80cc29f8dfffa0e9dc5309a"}}}}, @TCA_BPF_OPS={0x14, 0x5, [{0x100000000, 0xfffffffffffff542, 0x9, 0x53fcec52}, {0x4, 0x1, 0x3, 0x100000000}]}, @TCA_BPF_ACT={0x8c, 0x1, @m_police={0x88, 0x5, {{0xc, 0x1, 'police\x00'}, {0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}, {0x68, 0x6, "b7b004faa98c126f21c317e1e12950547528b2f628690e4278378efcef6c812709b462161ba89555779b6c62d645606485cf25c2bea094936fa0894647572c56807e3a918e956dd4a7075ec37ddb46cc5c519e0827be26517c70a49a7e1fc57670"}}}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={0x34, 0x5, [{0x7, 0xdc, 0x1ff, 0x6}, {0x4, 0xfff, 0x32, 0x3ff}, {0x6, 0x101, 0xffffffffffffff0f, 0x7}, {0x4, 0x3, 0x1, 0x200}, {0x9, 0x1, 0xcf5, 0x8001}, {0x6, 0x5, 0xcf46, 0x7f}]}]}}, @filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}, @TCA_RATE={0x8, 0x5, {0x5, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$random(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x200000, 0x0) 02:21:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sync_file_range(r0, 0xf4, 0x3, 0x5) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x101000) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000080)={0x1, [0x200]}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:21:04 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000040)={0x3, 0xfffffffffffffff8}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) r1 = add_key(&(0x7f0000000100)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$negate(0xd, r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x81, "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", 0x0, 0x4a90509c, 0x7, 0x5, 0x5, 0x0, 0x9, 0x1}}}, 0x128) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x450, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000000080000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b2, &(0x7f0000000180)=0x0) munmap(&(0x7f0000364000/0x2000)=nil, 0x2000) io_submit(r3, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xf0000000000000, 0x800000000000000, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) 02:21:04 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1092.374110] binder: undelivered TRANSACTION_ERROR: 29201 [ 1092.383559] binder: undelivered TRANSACTION_ERROR: 29201 02:21:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5460, 0x0) 02:21:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffff7, 0x2000) write$tun(r1, &(0x7f0000000080)={@void, @val={0x2, 0x80, 0xfff, 0x8, 0x8000}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @dev={[], 0x22}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @loopback}}, 0x3e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 02:21:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x2, r0, &(0x7f0000000080)="5db3810f8dc4c59d8248aef3af", 0xd, 0x729, 0x0, 0x1}]) 02:21:04 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000080)) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000100)={{0x81a, 0x7fff}, 'port1\x00', 0x80, 0x1, 0x9, 0x1ff, 0x6, 0x2, 0x0, 0x0, 0x7}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0xb4, r2, 0x110, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xa8f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x16}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xce}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000400000000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 02:21:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 02:21:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:21:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x301000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x7}, 0x1) 02:21:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa0, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="016361400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x1) 02:21:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000080)={0x0, @speck128}) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x101200, 0x0) fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@v1={0x2, "66b5e1f16d"}, 0x6, 0x1) 02:21:05 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) 02:21:05 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1093.227908] binder: 13532:13533 unknown command 1080124161 [ 1093.236189] binder: 13532:13533 ioctl c0306201 20000440 returned -22 [ 1093.248118] binder: 13536:13537 ioctl 40106614 20000080 returned -22 [ 1093.262508] binder: 13532:13533 unknown command 1080124161 [ 1093.269012] binder: 13532:13533 ioctl c0306201 20000440 returned -22 [ 1093.305907] binder: 13536:13544 ioctl 40106614 20000080 returned -22 02:21:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap$binder(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x8010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200105e000000002d00000000000080000000000000000000000000000000006f00000000400000e2ff00000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) [ 1093.399809] FS-Cache: Duplicate cookie detected [ 1093.403151] binder: 13553:13554 unknown command 1578106882 [ 1093.405541] FS-Cache: O-cookie c=00000000250a952b [p=000000004f092a8c fl=222 nc=0 na=1] [ 1093.413618] binder: 13553:13554 ioctl c0306201 20000440 returned -22 [ 1093.418734] FS-Cache: O-cookie d=00000000869bc68d n=00000000bd0be09d [ 1093.431901] FS-Cache: O-key=[10] '0200020000807f000008' [ 1093.438239] FS-Cache: N-cookie c=00000000df598613 [p=000000004f092a8c fl=2 nc=0 na=1] 02:21:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x7010c2) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f00000001c0)={0x0, 0x81, 0x80000001, 0x2}) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000100)={0x8, 0x2, 0x7}) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64MMAP\x00', &(0x7f0000000080)='bdevprocsecurityvboxnet1+[[}user-,%]:\x00', 0x26, 0x1) [ 1093.441350] binder: 13553:13555 unknown command 1578106882 [ 1093.446372] FS-Cache: N-cookie d=00000000869bc68d n=00000000a72861e3 [ 1093.452315] binder: 13553:13555 ioctl c0306201 20000440 returned -22 [ 1093.458631] FS-Cache: N-key=[10] '0200020000807f000008' 02:21:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa0, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x22002, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000080)=0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:21:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff) 02:21:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x30, r0, 0x800000003) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) 02:21:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) 02:21:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x100000000) [ 1093.774921] binder_transaction: 13 callbacks suppressed [ 1093.774931] binder: 13578:13579 got reply transaction with no transaction stack [ 1093.823086] binder: 13578:13579 got reply transaction with no transaction stack [ 1093.851628] binder: 13582:13583 ioctl 40086602 20000000 returned -22 02:21:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7) [ 1093.881436] binder: 13582:13584 ioctl 40086602 20000000 returned -22 02:21:05 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 02:21:05 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x10000000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) r1 = semget$private(0x0, 0x1, 0x8) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000000080)=""/240) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x290000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={@ipv4={[], [], @loopback}, @local, @dev={0xfe, 0x80, [], 0x23}, 0x10001, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x400, 0xfffffffffffffffa, 0x20004, r3}) [ 1093.977967] binder: 13589:13590 got reply transaction with no transaction stack 02:21:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40000, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) [ 1094.081868] FS-Cache: Duplicate cookie detected [ 1094.088205] FS-Cache: O-cookie c=00000000315d6e2c [p=000000004f092a8c fl=222 nc=0 na=1] [ 1094.096580] FS-Cache: O-cookie d=00000000869bc68d n=0000000013afbaa8 [ 1094.103204] FS-Cache: O-key=[10] '0200020000807f000008' [ 1094.109094] FS-Cache: N-cookie c=00000000649d3c33 [p=000000004f092a8c fl=2 nc=0 na=1] [ 1094.117232] FS-Cache: N-cookie d=00000000869bc68d n=000000000970bb8d [ 1094.123849] FS-Cache: N-key=[10] '0200020000807f000008' [ 1094.166665] binder: 13604:13605 got reply transaction with no transaction stack 02:21:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:06 executing program 2: openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x80, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x92b, 0x2) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000080)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:21:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfffffdfd) 02:21:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$poke(0x5, r1, &(0x7f0000000080), 0xe6f) [ 1094.420691] binder: 13614:13616 got reply transaction with no transaction stack [ 1094.458350] binder_transaction: 18 callbacks suppressed 02:21:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) rt_tgsigqueueinfo(r2, r3, 0x2f, &(0x7f0000000100)={0x1d, 0x391}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) [ 1094.458369] binder: 13614:13616 transaction failed 29201/-71, size 0-0 line 2801 [ 1094.519388] binder: 13614:13616 got reply transaction with no transaction stack [ 1094.528854] binder: 13614:13616 transaction failed 29201/-71, size 0-0 line 2801 02:21:06 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000080)=0x103) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r2, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x24, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x38}}, 0x20040090) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 02:21:06 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000040)={0x3, 0xfffffffffffffff8}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) r1 = add_key(&(0x7f0000000100)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$negate(0xd, r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x81, "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", 0x0, 0x4a90509c, 0x7, 0x5, 0x5, 0x0, 0x9, 0x1}}}, 0x128) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x450, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000000080000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b2, &(0x7f0000000180)=0x0) munmap(&(0x7f0000364000/0x2000)=nil, 0x2000) io_submit(r3, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xf0000000000000, 0x800000000000000, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) 02:21:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x700000000000000) [ 1094.630801] QAT: Invalid ioctl 02:21:06 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x200000, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, &(0x7f0000000100)="81a4f11faac66d33accab28ff98c02347ab548bd722bf23b7d2697e78f9e1896d892b5c900e2e97ceb0c3a0e4f59c1c18c3e59b9473199f70a89202c82f706e44f5cd5eab06546a5114a4ff0220382ada7374f3e90a35d1d5d7562c14106cf404db84c31a6eab8f295ee6a55c7cd8393f98ef3220936626fa472636f54f4fd32b266f6b7f085c58625435aca672366287c66e8ebb2b18a16cfa57f26", 0x9c) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x7530}}, &(0x7f0000000080)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r1, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000340)={0xc, 0x8, 0xfa00, {&(0x7f00000001c0)}}, 0x10) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000400)=0x90002) fgetxattr(r0, &(0x7f0000000380)=@random={'btrfs.', '\x00'}, &(0x7f00000003c0)=""/19, 0x13) [ 1094.687341] QAT: Invalid ioctl 02:21:06 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000080)={0x2, [0x0, 0x0]}) [ 1094.836232] binder: 13642:13643 ioctl 40086602 20000400 returned -22 [ 1094.869255] binder: 13646:13648 got reply transaction with no transaction stack 02:21:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) [ 1094.944901] binder: 13646:13648 transaction failed 29201/-71, size 0-0 line 2801 02:21:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0xfffffffffffffffe) 02:21:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="016340944e7c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 02:21:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000) [ 1095.332971] binder: 13663:13666 unknown command -1807719679 [ 1095.346203] binder: 13663:13666 ioctl c0306201 20000440 returned -22 02:21:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) eventfd(0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:21:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 02:21:07 executing program 5: socket$inet6(0xa, 0x5000001000002, 0x3) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x20400003, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000006c0), &(0x7f0000000a00)=0x1) r1 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x7, 0x5) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(r1, 0x127f, 0xffffffffffffffff) recvmsg(r0, &(0x7f00000009c0)={&(0x7f0000000700)=@ax25, 0x80, &(0x7f0000000980)=[{&(0x7f0000001b40)=""/243, 0xf3}, {&(0x7f00000008c0)=""/177, 0xb1}], 0x2, &(0x7f0000000b40)=""/4096, 0x1000}, 0x400000010120) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x4000, 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0xffffffffffffff29, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x200242, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000400), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x20003, &(0x7f0000000b00)={0xffffffffffffffff}, 0x13b, 0x6}}, 0x20) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x36, 0x204000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xb9d, @loopback}, {0xa, 0x4e24, 0x3, @local, 0x38}, r5, 0x7f}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) r8 = memfd_create(&(0x7f0000000080)='vW\x87\xe1\xb1\x18\xfb\x00\x00\x00', 0x4) openat(r8, &(0x7f0000000280)='./file0\x00', 0x101000, 0x80) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0xfffffe78) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r9, 0x12, 0x2, &(0x7f0000000600)=""/157, &(0x7f0000000540)=0x23) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x400, @dev, 0x3}, r10}}, 0x48) write$FUSE_GETXATTR(r0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0x4, {0x401}}, 0x18) getsockopt$inet_dccp_int(r4, 0x21, 0x11, &(0x7f0000000a40), &(0x7f0000000880)=0x102d2) 02:21:07 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\xff', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:07 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x8200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1ff) signalfd(r0, &(0x7f0000000080)={0x10000}, 0x8) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r2, 0x0) [ 1095.558505] binder: 13679:13681 got reply transaction with no transaction stack 02:21:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x600000000000000) [ 1095.634384] binder: 13679:13681 transaction failed 29201/-71, size 0-0 line 2801 02:21:07 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0x7f) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r1, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x13) ioctl$CAPI_GET_ERRCODE(r2, 0x80024321, &(0x7f0000000080)) 02:21:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0163404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e18166419b70341064c538f8b99a13a3256b7005e42654001008fa04683107ba2ae349aa4a22a056bc35274d673dc91bd38d2456392adb6f266cf083488c9b5ade37eecc98500db2e1454967267405e3c01ab8f483ba28ec447be84ccaf78df43de0ad7dd4358f8a2639c1fdf4f121b806c8e4010f8a5338ce157d079b0d501d5fa63cb715209d7372cff45b35faacaca320717b228cf6de13578be4a09fff5572331671951b49fc9bc0b30e56d48f091f5f27093cde18e1a00e2ea7fd37b9afed89be2641a16089e2699ce8789c31ea6d8686b3beccbe65b8e09f551aa6952a15e3bc4754e75", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000001c0)={0x3ff, 0x4, 0x101, 0x0, 0x0, [], [], [], 0x34, 0x6}) [ 1095.791669] binder: 13704:13705 got reply transaction with no transaction stack [ 1095.815119] binder: 13704:13705 transaction failed 29201/-71, size 0-0 line 2801 [ 1095.865290] binder: 13704:13705 ioctl c10c5541 200001c0 returned -22 [ 1095.879473] binder: 13704:13705 got reply transaction with no transaction stack [ 1095.889072] binder: 13704:13711 ioctl c10c5541 200001c0 returned -22 [ 1095.896766] binder: 13704:13705 transaction failed 29201/-71, size 0-0 line 2801 [ 1095.905213] binder_release_work: 13 callbacks suppressed [ 1095.905220] binder: undelivered TRANSACTION_ERROR: 29201 [ 1095.924660] binder: undelivered TRANSACTION_ERROR: 29201 02:21:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x5, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:21:07 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\xf4', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0xfffffffffffffe4e, 0x0, 0x0}) 02:21:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff00000000) 02:21:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:07 executing program 5: socket$inet6(0xa, 0x5000001000002, 0x3) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x20400003, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000006c0), &(0x7f0000000a00)=0x1) r1 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x7, 0x5) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(r1, 0x127f, 0xffffffffffffffff) recvmsg(r0, &(0x7f00000009c0)={&(0x7f0000000700)=@ax25, 0x80, &(0x7f0000000980)=[{&(0x7f0000001b40)=""/243, 0xf3}, {&(0x7f00000008c0)=""/177, 0xb1}], 0x2, &(0x7f0000000b40)=""/4096, 0x1000}, 0x400000010120) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x4000, 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0xffffffffffffff29, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x200242, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000400), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x20003, &(0x7f0000000b00)={0xffffffffffffffff}, 0x13b, 0x6}}, 0x20) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x36, 0x204000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xb9d, @loopback}, {0xa, 0x4e24, 0x3, @local, 0x38}, r5, 0x7f}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) r8 = memfd_create(&(0x7f0000000080)='vW\x87\xe1\xb1\x18\xfb\x00\x00\x00', 0x4) openat(r8, &(0x7f0000000280)='./file0\x00', 0x101000, 0x80) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0xfffffe78) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r9, 0x12, 0x2, &(0x7f0000000600)=""/157, &(0x7f0000000540)=0x23) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x400, @dev, 0x3}, r10}}, 0x48) write$FUSE_GETXATTR(r0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0x4, {0x401}}, 0x18) getsockopt$inet_dccp_int(r4, 0x21, 0x11, &(0x7f0000000a40), &(0x7f0000000880)=0x102d2) [ 1096.213415] binder: 13724:13725 transaction failed 29201/-71, size 0-0 line 2801 02:21:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000080)=""/180) [ 1096.253915] binder: 13724:13725 ioctl c0306201 20000440 returned -14 [ 1096.332676] binder: undelivered TRANSACTION_ERROR: 29201 02:21:08 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:08 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000240)={0x5, 0x0, r1, 0x0, r2, 0x0, 0x2, 0x3de3}) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0xa5, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 02:21:08 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x101000) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000080)={0x3, 0xe9, "7e02a1c0052675868ef90c32feb64ac59209369d624690c635b6ed14a2913a55eb11493c7abf02a9d2d9adbf9272c3bc1598e0ebeecc6d5409239a00102cf62c8ea80a387cc2c9708264d33242e125832757c5eec62d1bb25fb41c85e58955241b2557957ae422e4028e8c54417db01230044ba88eaeb5c4555fcc9317b551a8384b45ae133c3c4231c5af33b5c529a33b865147c32358d4b1d0c9f6e19d734c5b1764ea747348d503e5eab2fb2548a4a18f6b1f7fa669e37891d3b99959eb004d1524964f062ba49bf70fcd914c3e496360b025adb736ed59f46ac77c6995f71e5f540b0faa8098c2"}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r1, 0x0) 02:21:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1096.485575] binder: 13754:13755 unknown command 1920234593 [ 1096.501998] binder: 13754:13755 ioctl c0306201 20000080 returned -22 [ 1096.517693] binder: 13754:13755 unknown command 1920234593 [ 1096.527385] binder: 13754:13755 ioctl c0306201 20000080 returned -22 02:21:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000000) 02:21:08 executing program 0: rt_sigaction(0x1b, &(0x7f00000000c0)={&(0x7f0000000000)="c4427d0f4de0c462fd208fd700000064f30faed13665400faefdc421b253fa2e3e360f5939463beef32e440f8803000000c4a2c108fa64460f1a3501000000", {0x4}, 0x2, &(0x7f0000000080)="c46139fbed65660f50ff400f01d92e3645f71e447d0dc4825dac6d0045f699ffefffffc4c349024a010ed013c4c18557f0"}, &(0x7f0000000180)={&(0x7f0000000100)="c4616d66190f185f0065660fd10980518b0e410f0565410f01dec4e37961ce08f36ec46141756b9f67440f380041f1", {}, 0x0, &(0x7f0000000140)="460f4eaf2fc3b957f04100af05000000c4a2790f9f050000000f380b7b00c44139e3e1f20f0ec442fd0882af564ff426260f01d7f3476f45c0a33a52c85d54"}, 0x8, &(0x7f00000001c0)) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000d7eebb8d6bb2cb09000000000000007cf4aa9320b289e944b841b09bbfd7bdac2d61e6430ed3ea37612b21ea3aa3ba40c22a65edb172cfeb191e31151da188bc87c9a85f7163831d546b71e7dab68972d466b9c0ebd442cf6b91332be70c2e8670cbafa851370d016455ca948cabacaf569e262c6bd07912bf621dbcc90cd7ddaf2d495e318a", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 02:21:08 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x441, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000300)) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_flowlabel\x00') ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x3000, 0x79, &(0x7f0000000080)=""/121}]}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r3, 0x2, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x3, @media='ib\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) 02:21:08 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1096.698198] binder: 13767:13770 transaction failed 29201/-71, size 0-0 line 2801 02:21:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffc) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x28, &(0x7f0000000140)}, 0x150453cb) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x6, 0x0, 0x9}) write$P9_RMKDIR(r1, &(0x7f00000000c0)={0x14, 0x49, 0x2, {0x28, 0x1, 0x2}}, 0x14) [ 1096.753304] FS-Cache: Duplicate cookie detected [ 1096.758395] FS-Cache: O-cookie c=000000005c731339 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1096.766807] FS-Cache: O-cookie d=00000000869bc68d n=000000007ebc9ead [ 1096.773433] FS-Cache: O-key=[10] '0200020000807f000008' [ 1096.779373] FS-Cache: N-cookie c=00000000c35c6b9f [p=000000004f092a8c fl=2 nc=0 na=1] [ 1096.788518] FS-Cache: N-cookie d=00000000869bc68d n=000000000a476104 [ 1096.795131] FS-Cache: N-key=[10] '0200020000807f000008' 02:21:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80100, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000400)={r2, @broadcast, @remote}, 0xc) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x1, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01634040000000000000000000000000000000000000000000000000000000000000000000000000000000002f", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x4) [ 1096.808793] binder: undelivered TRANSACTION_ERROR: 29201 02:21:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x40000000) [ 1096.909178] binder: 13785:13786 transaction failed 29201/-71, size 0-137439002671 line 2801 [ 1096.927929] binder: 13785:13786 transaction failed 29201/-71, size 0-137439002671 line 2801 [ 1096.953304] binder: undelivered TRANSACTION_ERROR: 29201 02:21:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) r1 = dup3(r0, r0, 0x80000) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) [ 1096.966689] binder: undelivered TRANSACTION_ERROR: 29201 [ 1097.066092] binder: undelivered TRANSACTION_ERROR: 29201 [ 1097.081668] binder: undelivered TRANSACTION_ERROR: 29201 02:21:08 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x8, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000080)={{0x0, @broadcast, 0x4e24, 0x1, 'lc\x00', 0x1, 0x100000000, 0x63}, {@multicast2, 0x4e22, 0x3, 0x6, 0x10000, 0x1f}}, 0x44) 02:21:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000080)={0xfffffffffffffff7, 0x2, 0x0, 0x2, [], [], [], 0x9, 0xfff, 0x9, 0x163, "5fe91a64d553acedce61626504bfc8e3"}) r2 = syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000003c0)={r3, 0x80}, 0x8) pwritev(r0, &(0x7f0000000040), 0x0, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={r4, @rand_addr=0x2, @remote}, 0xc) [ 1097.165690] binder: undelivered TRANSACTION_ERROR: 29201 [ 1097.172708] binder: undelivered TRANSACTION_ERROR: 29201 02:21:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x400000, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000) 02:21:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 02:21:09 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80100, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0x80000001, 0x9}, 'port0\x00', 0x44, 0x141058, 0x0, 0x8, 0xe041, 0x3, 0xfffffffeffffffff, 0x0, 0x1, 0x400}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={r2}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r1, 0x0) 02:21:09 executing program 5: gettid() r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000100)={0xf, {0x9, 0x3b4, 0x9, 0x8}, {0x7, 0x2, 0xa0, 0x1}, {0x80000000, 0xc9b}}) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x55, "6736e0e604e59de5aac8a119b09528a9355f1a8433ee0abed9b8c0f0f8959be54607cd49a4d1035ed4c349e8ded8cbb7a0b4c21f18d7c0cf44984c46bc8f3023eecb2228fea4b712317c595ad7069554a416ad1c4c"}, &(0x7f0000000180)=0x5d) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={r2, 0x7fff}, &(0x7f0000000740)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40), 0x0, 0x0, &(0x7f0000001e80)) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="e180db4e3b23cdde86a3b7ae4fdb961983a44c4bca5351a6904cf9b053d46ee6", 0x20) r4 = accept4(r3, 0x0, &(0x7f0000000080)=0x397, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000ac0)) recvmmsg(r4, &(0x7f0000001a80)=[{{&(0x7f00000002c0)=@l2, 0x80, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/233, 0xe9}, {&(0x7f00000004c0)=""/106, 0x6a}, {&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000580)=""/30, 0x1e}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/205, 0xcd}], 0x6, 0x0, 0x0, 0x7}, 0x8}, {{&(0x7f0000000840)=@nfc_llcp, 0x80, &(0x7f0000000980)=[{&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/103, 0x67}, {&(0x7f0000000940)=""/48, 0x30}], 0x3, &(0x7f00000009c0)=""/216, 0xd8}, 0x80000001}, {{&(0x7f0000001240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001a00)}}], 0x3, 0x0, &(0x7f0000001d00)={0x77359400}) syz_open_dev$sndseq(&(0x7f0000000780)='/dev/snd/seq\x00', 0x0, 0x2000) 02:21:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x9) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x200, 0x10000) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 02:21:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) futex(&(0x7f0000000000), 0x4, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) [ 1097.609146] *** Guest State *** [ 1097.625346] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1097.640050] binder: 13833:13834 ioctl 40046205 9 returned -22 02:21:09 executing program 5: gettid() r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000100)={0xf, {0x9, 0x3b4, 0x9, 0x8}, {0x7, 0x2, 0xa0, 0x1}, {0x80000000, 0xc9b}}) sched_getattr(0x0, &(0x7f0000000000), 0x30, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x55, "6736e0e604e59de5aac8a119b09528a9355f1a8433ee0abed9b8c0f0f8959be54607cd49a4d1035ed4c349e8ded8cbb7a0b4c21f18d7c0cf44984c46bc8f3023eecb2228fea4b712317c595ad7069554a416ad1c4c"}, &(0x7f0000000180)=0x5d) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={r2, 0x7fff}, &(0x7f0000000740)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40), 0x0, 0x0, &(0x7f0000001e80)) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="e180db4e3b23cdde86a3b7ae4fdb961983a44c4bca5351a6904cf9b053d46ee6", 0x20) r4 = accept4(r3, 0x0, &(0x7f0000000080)=0x397, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000ac0)) recvmmsg(r4, &(0x7f0000001a80)=[{{&(0x7f00000002c0)=@l2, 0x80, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/233, 0xe9}, {&(0x7f00000004c0)=""/106, 0x6a}, {&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000580)=""/30, 0x1e}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/205, 0xcd}], 0x6, 0x0, 0x0, 0x7}, 0x8}, {{&(0x7f0000000840)=@nfc_llcp, 0x80, &(0x7f0000000980)=[{&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/103, 0x67}, {&(0x7f0000000940)=""/48, 0x30}], 0x3, &(0x7f00000009c0)=""/216, 0xd8}, 0x80000001}, {{&(0x7f0000001240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001a00)}}], 0x3, 0x0, &(0x7f0000001d00)={0x77359400}) syz_open_dev$sndseq(&(0x7f0000000780)='/dev/snd/seq\x00', 0x0, 0x2000) [ 1097.670270] binder: 13833:13834 ioctl 40046205 9 returned -22 [ 1097.680818] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 02:21:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f79d2fe7a8ceb2039bf2a3afb6795b18c8f0c2e03b77d1959df3b6d7b2d8b8f10a9915e8668d9f6b81b3ecdd96e91910faaac05498ea24b0faf8685626194027ab725d051d9f5d03f013", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) [ 1097.717384] CR3 = 0x0000000000000000 [ 1097.746635] RSP = 0x0000000000000000 RIP = 0x0000000000000000 02:21:09 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x02', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x1, @mcast1, 0x6}}, [0x8000, 0xffffffffffffff81, 0x9, 0x200, 0x81, 0x8, 0x2b, 0x5, 0x3, 0x7, 0xfffffffffffffe01, 0x5, 0x4606, 0x8, 0xc8]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r2, 0xc1a5, 0x30}, 0xc) 02:21:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1100) [ 1097.787136] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 1097.821812] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1097.874204] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1097.933879] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1097.977115] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1098.014631] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1098.028839] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1098.037259] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1098.052253] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1098.061603] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1098.090980] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1098.104019] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1098.112150] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1098.126027] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1098.137052] Interruptibility = 00000000 ActivityState = 00000000 [ 1098.143442] *** Host State *** [ 1098.150747] RIP = 0xffffffff811f97e0 RSP = 0xffff88808b9af670 [ 1098.160997] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1098.169767] FSBase=00007f465814a700 GSBase=ffff8880ae700000 TRBase=fffffe0000003000 [ 1098.178853] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1098.185216] CR0=0000000080050033 CR3=0000000057d05000 CR4=00000000001426e0 [ 1098.192222] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff88001360 [ 1098.199036] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1098.205179] *** Control State *** [ 1098.208630] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 1098.215363] EntryControls=0000d1ff ExitControls=002fefff [ 1098.220818] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1098.227785] VMEntry: intr_info=800000f8 errcode=00000000 ilen=00000000 [ 1098.234529] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 02:21:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:10 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000080)={0x0, @reserved}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 02:21:10 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:10 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7, 0x3ffff) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe83}) msgget$private(0x0, 0x200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) fcntl$dupfd(0xffffffffffffffff, 0x1, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x7, &(0x7f0000000200)="33126285718070") r4 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r4, 0x0) bind$inet(r4, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r4, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10) creat(&(0x7f0000000240)='./file0\x00', 0x0) clone(0x1000000, &(0x7f0000000040)="6546dcb23acf10f6417308960043665d7d1627a424be9c64e596b59351c874fb7f8e69098563224d5ee12114f951d8fb4603a63ddf582a382ce1fc475275ea890225cf18923e50848ee4f0", 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) fcntl$getown(r5, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) 02:21:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x200000003) [ 1098.241118] reason=80000021 qualification=0000000000000000 [ 1098.247498] IDTVectoring: info=00000000 errcode=00000000 [ 1098.252957] TSC Offset = 0xfffffdb1ee80ac72 [ 1098.257337] TPR Threshold = 0x00 [ 1098.260714] EPT pointer = 0x0000000086f0501e [ 1098.328163] binder: 13878:13879 ioctl 660c 0 returned -22 [ 1098.358603] FS-Cache: Duplicate cookie detected [ 1098.363485] FS-Cache: O-cookie c=00000000fde18764 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1098.371849] FS-Cache: O-cookie d=00000000869bc68d n=000000001ebefac8 02:21:10 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x1002894, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0163404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x481) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080)=0x8, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x1, 0x100000001, 0x7, 0x4}]}, 0x10) [ 1098.378533] FS-Cache: O-key=[10] '0200020000807f000008' [ 1098.384363] FS-Cache: N-cookie c=00000000a9b93d5c [p=000000004f092a8c fl=2 nc=0 na=1] [ 1098.392449] FS-Cache: N-cookie d=00000000869bc68d n=0000000078c4e3d6 [ 1098.399143] FS-Cache: N-key=[10] '0200020000807f000008' [ 1098.456388] *** Guest State *** [ 1098.475365] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1098.501048] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1098.510651] CR3 = 0x0000000000000000 [ 1098.521031] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1098.527628] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 1098.542043] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 02:21:10 executing program 0: pipe2(&(0x7f0000000000), 0x84000) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) [ 1098.550505] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1098.566825] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1098.580062] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1098.622060] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 02:21:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4) [ 1098.673738] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1098.682205] binder: 13878:13879 ioctl 660c 0 returned -22 [ 1098.688875] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1098.699132] cgroup: fork rejected by pids controller in /syz2 [ 1098.701069] GDTR: limit=0x0000ffff, base=0x0000000000000000 02:21:10 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x18100, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x8}, &(0x7f0000000300)=0x90) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={r1, 0x5}, 0x8) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 02:21:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x4d00, 0x30, 0x0, 0x6}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={r2, 0x7, 0x10, 0x2, 0x8}, &(0x7f0000000180)=0x18) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) [ 1098.716318] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1098.743224] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1098.764165] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1098.816663] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1098.817277] binder_transaction: 17 callbacks suppressed [ 1098.817286] binder: 13904:13906 got reply transaction with no transaction stack [ 1098.873864] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1098.894809] Interruptibility = 00000000 ActivityState = 00000000 [ 1098.916090] binder: 13904:13911 got reply transaction with no transaction stack 02:21:10 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1098.925419] *** Host State *** [ 1098.968566] RIP = 0xffffffff811f97e0 RSP = 0xffff888053e77670 [ 1098.984175] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1099.003714] FSBase=00007f465814a700 GSBase=ffff8880ae700000 TRBase=fffffe0000033000 [ 1099.016050] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1099.043652] CR0=0000000080050033 CR3=0000000091d74000 CR4=00000000001426e0 [ 1099.060534] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff88001360 [ 1099.067578] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1099.074284] *** Control State *** [ 1099.077898] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 1099.084785] EntryControls=0000d1ff ExitControls=002fefff 02:21:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x5, 0x200, 0x2, 0x1ff}, {0xffffffff, 0x4, 0x7fffffff, 0x7fffffff}]}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:10 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6972, 0x20000) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x1fe, 0x0, &(0x7f0000ffd000/0x3000)=nil}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r1, 0x0) 02:21:10 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x40) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000240)={'nlmon0\x00', @ifru_settings={0x1000, 0x100000000, @cisco=&(0x7f0000000180)={0x1, 0xbf8}}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000080)='map_files\x00'}, 0x30) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000100)) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/144, 0x90}, {&(0x7f0000000380)=""/1, 0x1}], 0x2, &(0x7f0000000400)=""/64, 0x40}, 0x10021) fchdir(r3) ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f0000000040)={0x5, 0x480, 0x2, 0x7, 0x80000001}) quotactl(0x2080000202, &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000000)='\x00\x00') ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000280)={r3}) [ 1099.090321] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1099.097340] VMEntry: intr_info=800000f8 errcode=00000000 ilen=00000000 [ 1099.104129] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1099.110714] reason=80000021 qualification=0000000000000000 [ 1099.117204] IDTVectoring: info=00000000 errcode=00000000 [ 1099.122655] TSC Offset = 0xfffffdb17aaceea5 [ 1099.127093] TPR Threshold = 0x00 [ 1099.130475] EPT pointer = 0x00000000595db01e 02:21:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80401, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0xfffffffffffffffa, @mcast1}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r2, 0xb1}, &(0x7f0000000200)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000280)=[@exit_looper], 0x0, 0x0, 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) 02:21:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x11000000) 02:21:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="016340400000000000000000000000000000000036e100000000000037000000000001000000000000000000000000000000000000050000030000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 02:21:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x189000, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080)={0xb52}, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) [ 1099.267145] *** Guest State *** [ 1099.270796] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1099.284147] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1099.304895] CR3 = 0x0000000000000000 02:21:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x2a) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xa) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x13, [{}]}]}, 0x24}}, 0x0) getpeername(r1, &(0x7f0000003880)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003900)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003940)={'vcan0\x00', 0x0}) getpeername$packet(r1, &(0x7f0000003980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000039c0)=0xfe25) sendmsg$nl_route(r1, &(0x7f0000003ac0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a00)=@mpls_newroute={0x74, 0x18, 0x300, 0x70bd2c, 0x25dfdbfc, {0x1c, 0x14, 0x0, 0x8, 0xfe, 0x0, 0xff, 0x7, 0x200}, [@RTA_DST={0x14, 0x1, [{0x6, 0x0, 0x10000, 0xfffffffffffffffe}, {0xe9c, 0x3f, 0x3, 0x5}, {0x436, 0xfff, 0x100000001, 0x2}, {0x1ff, 0x4, 0x20, 0x81}]}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x5}, @RTA_DST={0x1c, 0x1, [{0x6, 0x2, 0x3ff, 0x5}, {0x1, 0xff, 0x3, 0xf19}, {0xfff, 0x200, 0x7, 0x8}, {0x40, 0x5a, 0x6, 0x80000001}, {0x0, 0x8, 0x9, 0x800}, {0x6, 0x1000, 0x6, 0xf9}]}, @RTA_OIF={0x8, 0x4, r2}, @RTA_OIF={0x8, 0x4, r3}, @RTA_OIF={0x8, 0x4, r4}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x1}]}, 0x74}}, 0x24000890) [ 1099.325089] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1099.370224] binder: 13939:13941 got reply transaction with no transaction stack [ 1099.375712] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 02:21:11 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bridge_slave_1\x00', &(0x7f0000000040)=@ethtool_ringparam={0x9}}) r1 = socket$inet(0x2, 0x805, 0xfffffffffffffffc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@mcast2, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) 02:21:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc000000) 02:21:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x40010, r0, 0x0) [ 1099.418396] binder: 13939:13941 got reply transaction with no transaction stack [ 1099.423052] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1099.452083] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1099.503720] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1099.523777] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1099.545154] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 02:21:11 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1099.563468] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1099.609396] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1099.623858] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1099.673405] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1099.696107] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1099.713631] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1099.733900] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1099.748375] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1099.777494] Interruptibility = 00000000 ActivityState = 00000000 [ 1099.795068] *** Host State *** [ 1099.805926] RIP = 0xffffffff811f97e0 RSP = 0xffff888053e77670 [ 1099.825003] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1099.836073] FSBase=00007f465814a700 GSBase=ffff8880ae600000 TRBase=fffffe0000003000 [ 1099.850140] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1099.860515] CR0=0000000080050033 CR3=000000008fef7000 CR4=00000000001426f0 [ 1099.872068] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff88001360 [ 1099.883189] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1099.893399] *** Control State *** [ 1099.900765] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 1099.911737] EntryControls=0000d1ff ExitControls=002fefff [ 1099.921085] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1099.933566] VMEntry: intr_info=800000f8 errcode=00000000 ilen=00000000 [ 1099.944307] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1099.955502] reason=80000021 qualification=0000000000000000 [ 1099.965816] IDTVectoring: info=00000000 errcode=00000000 [ 1099.975392] TSC Offset = 0xfffffdb109b2d1d8 [ 1099.982124] TPR Threshold = 0x00 [ 1099.986844] EPT pointer = 0x00000000a8b6001e 02:21:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x40000000000803) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000100)) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0163404000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x8) 02:21:11 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0), 0x2000000000000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x200000, 0x0, 0x1000, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x339, 0x0, 0x0, 0x0, 0x2000000002, 0x0, 0x0, 0x2cb3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/176, 0xb0}], 0x1) r1 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="5c195772864583bec847f2c6fb876dac7e566b1240169fe75e19f3fc3ecae3f4d24c5cf12e9b8c187a8d95bb0a3f9b6a854e49962e2c31a155edbca2a6cc8de47272781bafbaa0a4dd1a584e8ab21484ffafdd2477a0a24f278460cb71730afbfc2c61b14daf98d5dffbd0472992adff47437cd3d82b1e2eec3247b103432f7c955b4081b7e1c3b2a0871a413f9184fa2123", 0x92, 0xffffffffffffffff) keyctl$invalidate(0x15, r1) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000006c0)=""/23) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000007c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$RTC_WIE_OFF(r2, 0x7010) sendto$inet(r3, &(0x7f0000000e40)="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", 0x481, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000240)={0x0}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={r4, 0x7ffff, 0xffffffffffffffff}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r6, 0x40106410, &(0x7f0000000040)={0xa1, &(0x7f0000000180)="91e4bbb5fd907ed07af6b729d8150f0508269b0efa02388ab53c97385f0cee732b536c8e4baff728f7dc0669752ac53c4969aee13662af0c67dc09f965bef39e49672bcdc1bb238a5760de65562f4ba0ca07dc4e6f66e816bd0e9291bfc9a64088ff5d9cc6b60fa2948e5cf027e3100bf0e65731557d9037bd056f03c4615d40d5152c6b46c6e1e254eb604464ce115916fa84f23f1b63ad16732ed7d59c35fba3"}) sendto$inet(r3, &(0x7f00004b3fff), 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f0000000080)=""/168, 0xa8}}], 0x1, 0x0, &(0x7f0000004540)={0x77359400}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x600001, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00'}, &(0x7f00000002c0)=0x44) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) 02:21:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6000000) [ 1100.104995] binder: 13968:13969 got reply transaction with no transaction stack [ 1100.166744] binder_transaction: 17 callbacks suppressed [ 1100.166762] binder: 13968:13969 transaction failed 29201/-71, size 0-0 line 2801 [ 1100.186222] *** Guest State *** [ 1100.193627] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1100.201684] binder: 13968:13971 ioctl 40086602 20000000 returned -22 02:21:12 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\xc0', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1100.222522] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1100.258770] binder: 13968:13971 got reply transaction with no transaction stack [ 1100.274234] CR3 = 0x0000000000000000 [ 1100.281766] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1100.291550] binder: 13968:13971 transaction failed 29201/-71, size 0-0 line 2801 02:21:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3f000000) [ 1100.317972] binder: 13968:13969 ioctl 40086602 20000000 returned -22 [ 1100.333689] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 02:21:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = fcntl$dupfd(r0, 0x406, r0) execveat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000080)='/dev/binder#\x00', &(0x7f00000000c0)='.\x00'], &(0x7f0000000480)=[&(0x7f0000000140)='/\\\x00', &(0x7f0000000180)='/dev/binder#\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='/dev/binder#\x00', &(0x7f0000000240)='}4\x00', &(0x7f0000000300)=']md5sumposix_acl_accesssystembdevselinux-^.\x00', &(0x7f0000000340)='/dev/binder#\x00', &(0x7f0000000380)='#)GPLmd5sum,:+selinuxnodevselfem0eth1\x00', &(0x7f00000003c0)='/dev/binder#\x00', &(0x7f0000000400)='/dev/binder#\x00'], 0x500) setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000000500)=0x7, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) [ 1100.391080] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1100.475758] binder: 13987:13988 got reply transaction with no transaction stack [ 1100.482167] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1100.483257] binder: 13987:13988 transaction failed 29201/-71, size 0-0 line 2801 02:21:12 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\xff', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1100.519210] binder: 13987:13990 got reply transaction with no transaction stack [ 1100.539372] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1100.547925] binder: 13987:13990 transaction failed 29201/-71, size 0-0 line 2801 02:21:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7f, 0x10000) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000000c0)={0x4, 0xfffffffffffffff9}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0xfffffe86, 0x0, 0x0}) [ 1100.569702] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1100.607526] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1100.643833] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1100.669153] binder: 13998:13999 got reply transaction with no transaction stack [ 1100.676888] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1100.701777] binder: 13998:13999 transaction failed 29201/-71, size 0-0 line 2801 [ 1100.710371] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1100.718886] binder: 13998:13999 ioctl c0306201 20000080 returned -14 02:21:12 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1100.742796] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1100.778159] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1100.807228] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1100.830211] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1100.840364] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1100.852560] Interruptibility = 00000000 ActivityState = 00000000 [ 1100.862728] *** Host State *** [ 1100.869838] RIP = 0xffffffff811f97e0 RSP = 0xffff8880950af670 [ 1100.876688] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1100.883416] FSBase=00007f465814a700 GSBase=ffff8880ae600000 TRBase=fffffe0000033000 [ 1100.891904] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1100.912449] CR0=0000000080050033 CR3=0000000075ace000 CR4=00000000001426f0 [ 1100.935901] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff88001360 [ 1100.957072] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1100.971459] *** Control State *** [ 1100.976739] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 1100.988697] EntryControls=0000d1ff ExitControls=002fefff [ 1100.995606] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1101.003032] VMEntry: intr_info=800000f8 errcode=00000000 ilen=00000000 [ 1101.016764] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1101.027885] reason=80000021 qualification=0000000000000000 [ 1101.038272] IDTVectoring: info=00000000 errcode=00000000 [ 1101.047023] TSC Offset = 0xfffffdb08b8fc638 [ 1101.051562] TPR Threshold = 0x00 [ 1101.058449] EPT pointer = 0x000000006d70b01e 02:21:12 executing program 5: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) socket$inet6_dccp(0xa, 0x6, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0xb, 0x0, &(0x7f0000000040)) r1 = semget$private(0x0, 0x0, 0x17) semctl$IPC_RMID(r1, 0x0, 0x0) 02:21:12 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000240)='/dev/rtc#\x00', 0x2, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r2 = dup(r1) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e24, @remote}, {0x0, @dev={[], 0x2a}}, 0x4, {0x2, 0x4e24, @loopback}, 'bridge_slave_1\x00'}) getsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0xda, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="01630600000000000000001f0000000000000000000000000040000000000000000000000080000000000000000000000000000000000000000000007bdcfcac612cbec223237009217c1ade69520332c8e513de0d8865b86ecbe912e00d3910704c8f6c26b00ea09fee8a83489c783a00128077e188e309a4d8cb17638588dd8bd5dcbd3b8d54012a12cfdca5ee8817e37a21abafe83341e8359eeed9f8a391d3539c0a0b4e7b104c0a65c163b6d67a6d2c468babc5ec748e9d9e053819b6dcafbd8fd502f484f57e83f70ddbccbc24f85a", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'cpuset#vboxnet1'}, {0x20, '/dev/binder#\x00'}, {}, {0x20, '],.'}], 0xa, "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"}, 0x102e) 02:21:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 02:21:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = semget(0x1, 0x3, 0x404) semop(r1, &(0x7f0000000240)=[{0x4, 0x3, 0x800}, {0x0, 0x6}, {0x0, 0x6, 0x800}, {0x1, 0x401, 0x1000}], 0x4) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140)) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x244100, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f00000002c0)={0x8001004, 0x47e, 0x2}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) fadvise64(r0, 0x56, 0xffffffff, 0x5) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000080)=""/126, &(0x7f0000000100)=0x7e) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x40010, r3, 0xfffffffffffffffe) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x3) 02:21:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1101.276313] binder: 14019:14020 ioctl 8955 200000c0 returned -22 02:21:13 executing program 5: r0 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x2, 0x5) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x8000, 0x4) r1 = getpgrp(0xffffffffffffffff) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x28000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x29c, 0x5, 0x1, 0x300, 0x70bd2d, 0x25dfdbfb, {0x3, 0x0, 0x5}, [@typed={0x8, 0x89, @pid=r1}, @typed={0x100, 0x33, @binary="e1145c9ccd3205315394087fea2a898b3acd7c60652a38180b4b29a8c12b1e9333e976929d7ccdc20245b39d86535e8f2719e9841f1e50ef825876e2c6b30f615d91752e4c56846680d971b250cbdc222dfc949d615a672724207ec50c8419342facb6ea3fa22517f3f7cb097048651cf46d9ba88d25e2b126530c62f58eb4de02b5756813c49b417d14383f6c5bc9d97b140a42c218a7da3de4939112598ed9d995d5b2f1ada2ac07737e7587d42403197742d6f09b6ebce79ea84f09b837868f1f8572daed54bc71eef54859e3fc5b66b5d1142132c9f06e13a2095a07167e914eee0bc3438001fdd02c16738c7a2a5ff27364d74ac59346"}, @typed={0x8, 0x76, @ipv4=@remote}, @nested={0x160, 0x65, [@generic="5ef1828a7669e09f6a9d75abfd677b1c3cce418a5c3e0365aca4a27f67023d0d3137ef0d90ee9d2029e303b9233e9ee8f3b25896cdd5c49e90f2b6c135fe31e484298c3f3545b6b826eaebf538ec485a02b47f0e59c14aa801c5e2acf87a37d7c3ef96384772129e908ef1b7481098b3dddf97e46696e137ffbfd7adc746d8364a80dc03845bf70ac3be7f1b93170bae6066a563c9268c335566837c563a9b3ff9982f30d7fe5481dcde0f8d9c", @typed={0x10, 0x14, @str='/dev/midi#\x00'}, @generic="594e5c633397b789cd2e25e6fff102d67e2353afc19d156a914be988ce0fa33bc07918cb9c1b581d0f480054fe7878ec0e5f2017e3614f86b8a9d7474c7ed67256f12d03da5ce28fae43d47c97d88c5765b34158712837b56823dd6a375fc804fce2bc1f6215e985ce080a506f142dac85ceeb84a5b5b506093a6d17adb8ca6da24864c0a74e1031d9ac64e462edbd4ca1fdf2215a2ac59986290c674be7"]}, @nested={0x18, 0x73, [@typed={0x14, 0x2e, @ipv6=@loopback}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000500)={0x1, 0x32b5, 0x3f}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8}, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1101.334200] binder: 14019:14020 unknown command 418561 [ 1101.339517] binder: 14019:14020 ioctl c0306201 20000440 returned -22 02:21:13 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x700) [ 1101.455905] binder: 14019:14023 ioctl 8955 200000c0 returned -22 [ 1101.480809] binder: 14019:14023 unknown command 418561 [ 1101.493671] binder: 14019:14023 ioctl c0306201 20000440 returned -22 02:21:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01630c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000eb1bd0cae0faa7fe3f6164c80e2d0e2f1409e8c96331ce8547af0ea29b7dec6f2fb469beb2242a2db49741a1bf66ba28879f770e5fcec4b54c09158bc247406f72739d4daf0ab01dad2ab863b6c6f0a86713324c07cec1951ea6608ed5ea696a63b2558625ed75a667ca5516bfa173b3db38161570f9afc429a129cb9ac29724078411354ec8672903cd3ef03c8f", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) [ 1101.564919] IPVS: ftp: loaded support on port[0] = 21 [ 1101.611275] binder: 14037:14038 unknown command 1074553601 [ 1101.639523] binder: 14037:14038 ioctl c0306201 20000440 returned -22 02:21:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400200, 0x140) write$P9_RWSTAT(r1, &(0x7f0000000080)={0x7, 0x7f, 0x1}, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 02:21:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x11) [ 1101.776536] binder: 14042:14043 got reply transaction with no transaction stack [ 1101.804498] binder: 14042:14043 transaction failed 29201/-71, size 0-0 line 2801 [ 1101.814749] binder: 14042:14043 transaction failed 29201/-71, size 0-0 line 2801 [ 1101.829924] binder_release_work: 18 callbacks suppressed [ 1101.829932] binder: undelivered TRANSACTION_ERROR: 29201 [ 1101.842514] binder: undelivered TRANSACTION_ERROR: 29201 02:21:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) dup(r0) [ 1101.963086] binder: 14050:14052 transaction failed 29201/-71, size 0-0 line 2801 [ 1102.009395] binder: 14050:14052 transaction failed 29201/-71, size 0-0 line 2801 [ 1102.037707] binder: undelivered TRANSACTION_ERROR: 29201 [ 1102.051035] binder: undelivered TRANSACTION_ERROR: 29201 02:21:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) 02:21:13 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1102.755145] chnl_net:caif_netlink_parms(): no params data found [ 1102.784879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.791325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.798861] device bridge_slave_0 entered promiscuous mode [ 1102.933334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.939889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.947441] device bridge_slave_1 entered promiscuous mode [ 1102.964558] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1102.974070] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1103.120560] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1103.128262] team0: Port device team_slave_0 added [ 1103.133693] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1103.141284] team0: Port device team_slave_1 added [ 1103.146903] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1103.154802] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1103.347078] device hsr_slave_0 entered promiscuous mode [ 1103.404880] device hsr_slave_1 entered promiscuous mode [ 1103.474179] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1103.609547] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1103.626052] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.632762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.639476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.645894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.794752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.801882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.971647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1103.981626] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1103.989897] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1103.996127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1103.996707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1104.013226] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1104.019909] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.569407] bond1 (unregistering): Released all slaves [ 1107.615497] device hsr_slave_1 left promiscuous mode [ 1107.669678] device hsr_slave_0 left promiscuous mode [ 1107.729211] team0 (unregistering): Port device team_slave_1 removed [ 1107.740393] team0 (unregistering): Port device team_slave_0 removed [ 1107.751429] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1107.817976] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1107.929413] bond0 (unregistering): Released all slaves [ 1107.953352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1107.961217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1107.973875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1107.981411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.987799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.004192] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1108.013438] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1108.020624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1108.029448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1108.037204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.043581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.050505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1108.061215] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1108.072148] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1108.079530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1108.080319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1108.097771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1108.107171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1108.118904] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1108.126751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1108.135325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1108.148007] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1108.158302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1108.166414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1108.166994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1108.181274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1108.188970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1108.199263] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1108.206105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1108.221388] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1108.235192] 8021q: adding VLAN 0 to HW filter on device batadv0 02:21:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:21:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01630c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000eb1bd0cae0faa7fe3f6164c80e2d0e2f1409e8c96331ce8547af0ea29b7dec6f2fb469beb2242a2db49741a1bf66ba28879f770e5fcec4b54c09158bc247406f72739d4daf0ab01dad2ab863b6c6f0a86713324c07cec1951ea6608ed5ea696a63b2558625ed75a667ca5516bfa173b3db38161570f9afc429a129cb9ac29724078411354ec8672903cd3ef03c8f", @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) 02:21:20 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x0, 0x7f, 0x18000, 0x7}, {0x7, 0x6, 0x1, 0x4}, {0x6, 0x2, 0x8000000, 0x200}, {0x5, 0x1f9b53ce, 0x0, 0xfffffffffffffffa}, {0x1e8f, 0x3f, 0x6c1, 0x7fff}, {0x1, 0x0, 0xfffffffffffffffd}, {0x9, 0x4, 0x401, 0x8}]}, 0x10) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x3f, @local, 0x4e23, 0x1, 'lblc\x00', 0x8, 0x654c, 0x1}, 0x2c) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r1, 0x0) 02:21:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffffffff00000000) 02:21:20 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1108.401788] binder: 14080:14088 unknown command 1074553601 [ 1108.420830] FS-Cache: Duplicate cookie detected [ 1108.428847] FS-Cache: O-cookie c=000000007160e046 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1108.437280] FS-Cache: O-cookie d=00000000869bc68d n=00000000074650c9 [ 1108.444115] FS-Cache: O-key=[10] '0200020000807f000008' [ 1108.449961] FS-Cache: N-cookie c=00000000dabe9bea [p=000000004f092a8c fl=2 nc=0 na=1] [ 1108.450249] binder: 14080:14088 ioctl c0306201 20000440 returned -22 [ 1108.458108] FS-Cache: N-cookie d=00000000869bc68d n=0000000011105934 [ 1108.471273] FS-Cache: N-key=[10] '0200020000807f000008' 02:21:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x1000001, 0x2012, r0, 0x0) 02:21:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1708d47c7f0000) 02:21:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:21:20 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:20 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x40, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x301840, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r2, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1ff, 0x101000) getsockopt$inet_mreqn(r3, 0x0, 0x40000020, &(0x7f0000000080)={@multicast1, @local}, &(0x7f00000000c0)=0xc) [ 1108.802646] FS-Cache: Duplicate cookie detected [ 1108.807886] FS-Cache: O-cookie c=000000007160e046 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1108.816419] FS-Cache: O-cookie d=00000000869bc68d n=00000000074650c9 [ 1108.823084] FS-Cache: O-key=[10] '0200020000807f000008' [ 1108.829104] FS-Cache: N-cookie c=000000000a6af345 [p=000000004f092a8c fl=2 nc=0 na=1] [ 1108.837349] FS-Cache: N-cookie d=00000000869bc68d n=00000000e3ded338 [ 1108.843984] FS-Cache: N-key=[10] '0200020000807f000008' 02:21:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1108.869514] binder_alloc: binder_alloc_mmap_handler: 14114 20ffd000-21000000 already mapped failed -16 02:21:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x600) 02:21:20 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 02:21:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adcfa42c5248db47079246b75c3a919fee4e54e23cecad75876e4") r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) 02:21:20 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x02', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:20 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80007, 0xe63) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000140)={r1}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000002c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x1c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0xa920, 0xb1}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={r3, @in={{0x2, 0x4e22, @rand_addr=0x1200000000000}}, 0x0, 0xe9}, 0x90) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x5) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r4, 0x2174, 0x1, [0x7]}, 0xa) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2016, r0, 0x0) 02:21:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1800000000000000) 02:21:21 executing program 5 (fault-call:12 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:21 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:21 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x02', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1109.445683] FAULT_INJECTION: forcing a failure. [ 1109.445683] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.462796] CPU: 1 PID: 14152 Comm: syz-executor5 Not tainted 4.20.0+ #2 [ 1109.469659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1109.479010] Call Trace: [ 1109.481614] dump_stack+0x1db/0x2d0 [ 1109.485259] ? dump_stack_print_info.cold+0x20/0x20 [ 1109.485279] ? kvm_get_pfn+0x280/0x280 [ 1109.485295] ? add_lock_to_list.isra.0+0x450/0x450 [ 1109.485322] should_fail.cold+0xa/0x15 [ 1109.503008] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1109.508131] ? ___might_sleep+0x1e7/0x310 [ 1109.512288] ? arch_local_save_flags+0x50/0x50 [ 1109.516881] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1109.522426] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1109.528003] __should_failslab+0x121/0x190 [ 1109.532252] should_failslab+0x9/0x14 [ 1109.536060] kmem_cache_alloc+0x2be/0x710 [ 1109.540228] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1109.545262] mmu_topup_memory_caches+0x97/0x490 [ 1109.549955] kvm_mmu_load+0x21/0x1200 [ 1109.553830] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1109.558773] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1109.564351] ? update_cr8_intercept+0x170/0x1f0 [ 1109.569042] vcpu_enter_guest+0x3f0e/0x6520 [ 1109.573387] ? emulator_read_emulated+0x50/0x50 [ 1109.578071] ? apic_mmio_write+0x2f0/0x2f0 [ 1109.582317] ? kvm_clear_dirty_log_protect+0x970/0x970 [ 1109.587603] ? find_held_lock+0x35/0x120 [ 1109.591679] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1109.596704] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1109.601735] ? apic_has_interrupt_for_ppr+0x125/0x290 [ 1109.606934] ? kvm_check_async_pf_completion+0x3a8/0x5d0 [ 1109.612422] ? kvm_apic_has_interrupt+0xe9/0x230 [ 1109.617200] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1109.622746] ? kvm_cpu_has_interrupt+0xe5/0x100 [ 1109.625614] FS-Cache: Duplicate cookie detected [ 1109.627430] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1109.627448] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 1109.627485] kvm_vcpu_ioctl+0x558/0x12d0 [ 1109.627506] ? kvm_vcpu_block+0x1010/0x1010 [ 1109.627525] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1109.632237] FS-Cache: O-cookie c=0000000035078847 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1109.637031] ? lock_downgrade+0x910/0x910 [ 1109.637047] ? kasan_check_read+0x11/0x20 [ 1109.637064] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1109.637081] ? rcu_read_unlock_special+0x380/0x380 [ 1109.637106] ? __fget+0x499/0x710 [ 1109.637128] ? iterate_fd+0x4b0/0x4b0 [ 1109.637149] ? kvm_vcpu_block+0x1010/0x1010 [ 1109.637164] do_vfs_ioctl+0x107b/0x17d0 [ 1109.637183] ? wait_for_completion+0x810/0x810 [ 1109.637202] ? ioctl_preallocate+0x2f0/0x2f0 [ 1109.637220] ? __fget_light+0x2db/0x420 [ 1109.637243] ? fget_raw+0x20/0x20 [ 1109.642279] FS-Cache: O-cookie d=00000000869bc68d n=00000000ea2aed10 [ 1109.646301] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1109.646316] ? fput+0x128/0x1a0 [ 1109.646332] ? do_syscall_64+0x8c/0x800 [ 1109.646348] ? do_syscall_64+0x8c/0x800 [ 1109.646363] ? lockdep_hardirqs_on+0x415/0x5d0 02:21:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xf55, 0x80000) write$vnet(r1, &(0x7f0000000500)={0x1, {&(0x7f0000000400)=""/236, 0x7b96a65660496b46, &(0x7f0000000280)=""/88, 0x3, 0x7}}, 0x68) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) [ 1109.646383] ? security_file_ioctl+0x93/0xc0 [ 1109.646401] ksys_ioctl+0xab/0xd0 [ 1109.646419] __x64_sys_ioctl+0x73/0xb0 [ 1109.650773] FS-Cache: O-key=[10] '0200020000807f000008' [ 1109.656252] do_syscall_64+0x1a3/0x800 [ 1109.656271] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1109.656290] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1109.656312] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1109.656337] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1109.656349] RIP: 0033:0x457ec9 [ 1109.656366] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1109.656381] RSP: 002b:00007f3885c51c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1109.666141] FS-Cache: N-cookie c=000000007e26279a [p=000000004f092a8c fl=2 nc=0 na=1] [ 1109.668642] RAX: ffffffffffffffda RBX: 00007f3885c51c90 RCX: 0000000000457ec9 [ 1109.668651] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1109.668660] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1109.668669] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3885c526d4 [ 1109.668679] R13: 00000000004c0e36 R14: 00000000004d2758 R15: 0000000000000006 [ 1109.672899] FS-Cache: N-cookie d=00000000869bc68d n=00000000d6cb0274 [ 1109.708585] FS-Cache: N-key=[10] '0200020000807f000008' 02:21:21 executing program 0: socket$inet6(0xa, 0x0, 0x40000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0x2f1}, &(0x7f0000000300)}, 0x191) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x141000, 0x0) r2 = syz_open_dev$dspn(&(0x7f00000004c0)='/dev/dsp#\x00', 0x288dab09, 0x800) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd}) io_setup(0x9, &(0x7f0000000480)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\'', 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x0, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x100000000, 0x0, 0x8, 0xffffffffffffd5c2, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x0, 0xb) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x70, 0x401, 0x0, 0x40, 0x9, 0x0, 0x9, 0x1, 0x6, 0x8000, 0x0, 0x200, 0xe2, 0x9, 0x0, 0x1d9, 0x80, 0x4, 0x8000, 0x0, 0x9, 0x9, 0x0, 0x6, 0x2, 0x5, 0x6d23, 0x3, 0x6205, 0xff, 0x5, 0x8, 0x2, 0x4b7, 0x5, 0x7f, 0x4, 0x0, 0x3, 0x2, @perf_config_ext={0x401, 0x1ff}, 0x10, 0x5, 0x2, 0x7, 0x5, 0xfffffffffffffffe, 0x7}, r2, 0x7, r0, 0x0) ioctl(r5, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x20110, r0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x100000000, 0x8000, 0xff, 0xf1, 0x800, 0x10001, 0x4}, 0x1c) close(r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x5}, 0x20) getresuid(&(0x7f0000000440), &(0x7f0000000140), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 02:21:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x4, 0x50050, r0, 0x40000000) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) 02:21:21 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:21 executing program 5 (fault-call:12 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300000002000000) 02:21:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa60, 0x100) write$P9_RCLUNK(r1, &(0x7f0000000080)={0x7, 0x79, 0x1}, 0x7) 02:21:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/stat\x00') ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000100)={0x6, 0x3, 0x200000, 0x45, 0xffffffffffffffff}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x402, 0x0) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000080)=0x5, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r1, 0x0) 02:21:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7000000) 02:21:22 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1110.463925] FS-Cache: Duplicate cookie detected [ 1110.468666] FS-Cache: O-cookie c=00000000201edd41 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1110.476874] FS-Cache: O-cookie d=00000000869bc68d n=0000000068bfc761 [ 1110.476883] FS-Cache: O-key=[10] '0200020000807f000008' [ 1110.476933] FS-Cache: N-cookie c=00000000bd5b2d0e [p=000000004f092a8c fl=2 nc=0 na=1] [ 1110.476953] FS-Cache: N-cookie d=00000000869bc68d n=00000000d9dcfe7b [ 1110.476961] FS-Cache: N-key=[10] '0200020000807f000008' 02:21:22 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2010, r0, 0x0) [ 1110.782660] FS-Cache: Duplicate cookie detected [ 1110.788662] FS-Cache: O-cookie c=00000000aaabd6d3 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1110.797326] FS-Cache: O-cookie d=00000000869bc68d n=0000000079146c43 [ 1110.804112] FS-Cache: O-key=[10] '0200020000807f000008' [ 1110.810130] FS-Cache: N-cookie c=00000000799c4c9f [p=000000004f092a8c fl=2 nc=0 na=1] [ 1110.818525] FS-Cache: N-cookie d=00000000869bc68d n=0000000054d170f3 [ 1110.825399] FS-Cache: N-key=[10] '0200020000807f000008' [ 1110.924983] *** Guest State *** [ 1110.939677] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 02:21:22 executing program 0: socket$inet6(0xa, 0x0, 0x40000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0x2f1}, &(0x7f0000000300)}, 0x191) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x141000, 0x0) r2 = syz_open_dev$dspn(&(0x7f00000004c0)='/dev/dsp#\x00', 0x288dab09, 0x800) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd}) io_setup(0x9, &(0x7f0000000480)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\'', 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x0, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x100000000, 0x0, 0x8, 0xffffffffffffd5c2, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x0, 0xb) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x70, 0x401, 0x0, 0x40, 0x9, 0x0, 0x9, 0x1, 0x6, 0x8000, 0x0, 0x200, 0xe2, 0x9, 0x0, 0x1d9, 0x80, 0x4, 0x8000, 0x0, 0x9, 0x9, 0x0, 0x6, 0x2, 0x5, 0x6d23, 0x3, 0x6205, 0xff, 0x5, 0x8, 0x2, 0x4b7, 0x5, 0x7f, 0x4, 0x0, 0x3, 0x2, @perf_config_ext={0x401, 0x1ff}, 0x10, 0x5, 0x2, 0x7, 0x5, 0xfffffffffffffffe, 0x7}, r2, 0x7, r0, 0x0) ioctl(r5, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x20110, r0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x100000000, 0x8000, 0xff, 0xf1, 0x800, 0x10001, 0x4}, 0x1c) close(r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x5}, 0x20) getresuid(&(0x7f0000000440), &(0x7f0000000140), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 02:21:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) [ 1111.010926] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1111.048841] CR3 = 0x0000000000000000 02:21:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8000, 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000080)={0x14, 0x11, 0x2, {0x52, 0x4, 0x4}}, 0x14) [ 1111.062253] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1111.084415] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 02:21:22 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1111.122978] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1111.162762] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 02:21:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e20, @broadcast}}, [0x3ff, 0x8, 0x9, 0x101, 0x0, 0x6, 0x8, 0x2, 0x400, 0x4, 0x540, 0xc24, 0x8, 0x5, 0x2]}, &(0x7f0000000480)=0x100) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000004c0)={r2, 0x6}, 0x8) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) [ 1111.203195] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1111.214011] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1111.222008] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 02:21:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x8a010, r0, 0x5c) [ 1111.397590] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1111.407111] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1111.416309] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1111.424592] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1111.449485] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1111.461561] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1111.474013] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1111.484114] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1111.491712] Interruptibility = 00000000 ActivityState = 00000000 [ 1111.521476] *** Host State *** [ 1111.530593] RIP = 0xffffffff811f97e0 RSP = 0xffff88808d6ff670 [ 1111.550215] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1111.567292] FSBase=00007f3885c52700 GSBase=ffff8880ae700000 TRBase=fffffe0000003000 [ 1111.579084] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1111.585579] CR0=0000000080050033 CR3=000000008af5d000 CR4=00000000001426e0 [ 1111.592742] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff88001360 [ 1111.601361] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1111.608068] *** Control State *** [ 1111.611671] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 1111.635935] EntryControls=0000d1ff ExitControls=002fefff [ 1111.674743] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1111.708906] VMEntry: intr_info=800000f8 errcode=00000000 ilen=00000000 [ 1111.729784] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1111.750191] reason=80000021 qualification=0000000000000000 [ 1111.800867] IDTVectoring: info=00000000 errcode=00000000 [ 1111.807824] TSC Offset = 0xfffffdaacce7ff25 [ 1111.812317] TPR Threshold = 0x00 [ 1111.816625] EPT pointer = 0x0000000091e2a01e 02:21:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 02:21:23 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3) 02:21:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$cec(&(0x7f00000004c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000580)="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") syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8005}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, 0x37, 0x400, 0x70bd2a, 0x25dfdbfb, {0x5}, [@nested={0x68, 0x8a, [@typed={0x14, 0xd, @ipv6}, @typed={0xc, 0x7, @u64=0x3}, @generic="cb0f7686d782941499c8fb769284ef70d8d46a6d52557df0ab50eaf50c479cfe1753e52a3f33be0d91b86a4c0d25af5bf049b1d0798438", @typed={0xc, 0x79, @u64=0xa257b92}]}, @typed={0x8, 0x4a, @uid=r2}, @typed={0x8, 0x3d, @uid=r3}, @typed={0x8, 0x2e, @str='\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x4081) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000500), 0xfffffffffffffe1a) ioctl$int_in(r0, 0x5473, &(0x7f0000000000)=0x5) 02:21:23 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\xff', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1111.945499] binder: 14260:14264 ioctl 41009432 20000580 returned -22 [ 1112.003189] binder: 14260:14270 ioctl 5473 20000000 returned -22 02:21:23 executing program 0: socket$inet6(0xa, 0x0, 0x40000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0x2f1}, &(0x7f0000000300)}, 0x191) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x141000, 0x0) r2 = syz_open_dev$dspn(&(0x7f00000004c0)='/dev/dsp#\x00', 0x288dab09, 0x800) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd}) io_setup(0x9, &(0x7f0000000480)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\'', 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x0, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x100000000, 0x0, 0x8, 0xffffffffffffd5c2, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x0, 0xb) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x70, 0x401, 0x0, 0x40, 0x9, 0x0, 0x9, 0x1, 0x6, 0x8000, 0x0, 0x200, 0xe2, 0x9, 0x0, 0x1d9, 0x80, 0x4, 0x8000, 0x0, 0x9, 0x9, 0x0, 0x6, 0x2, 0x5, 0x6d23, 0x3, 0x6205, 0xff, 0x5, 0x8, 0x2, 0x4b7, 0x5, 0x7f, 0x4, 0x0, 0x3, 0x2, @perf_config_ext={0x401, 0x1ff}, 0x10, 0x5, 0x2, 0x7, 0x5, 0xfffffffffffffffe, 0x7}, r2, 0x7, r0, 0x0) ioctl(r5, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x20110, r0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x100000000, 0x8000, 0xff, 0xf1, 0x800, 0x10001, 0x4}, 0x1c) close(r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x5}, 0x20) getresuid(&(0x7f0000000440), &(0x7f0000000140), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) [ 1112.069166] binder: 14260:14270 ioctl 41009432 20000580 returned -22 02:21:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) 02:21:23 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\xff', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x80) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000080)=""/212) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x400, 0x4) 02:21:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0x5450, 0x0) 02:21:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3f00000000000000) 02:21:24 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0) sendmsg$unix(r1, &(0x7f0000000280)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000140)="2382770d46ba4d6f9a93d20ee34922eabeab473590d5b9a4197b76c375ec632c516b226f310087bb067ea92aaca4a0238006fbabe2652fc762a2759c1dc55b0dfd4107c2ec328988d620497d194c893ed5d2e165e77febc372135230cde0f924e60f500fdec84cbe93aad2554aa6cfe03f46", 0x72}, {&(0x7f00000001c0)="cc8fe89ba253aa8b8c98491d5b39f813b51da70db123505a85d64bf579bc9de1abce4cd761661e52f47dfbcc2a67eec3d02240e8b107adf0ed2c67e81dad3e0052e7e6e1f084384cc1e7342f10c604020435f3a1b085533ece668bfaeb3243538fde7902dc0a964be0532b6e05c20e2b421d1cb37018a336bf59fe11d02b2e605c2b419bcb67abd8afe0cbe996a4c461451b47821a3205894feb54f59a96", 0x9e}], 0x2, 0x0, 0x0, 0x4c000}, 0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x2012, r0, 0x2) 02:21:24 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001340)=0x52, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]) r1 = syz_open_dev$sndpcmc(&(0x7f0000001280)='/dev/snd/pcmC#D#c\x00', 0x7fff, 0x200100) write$P9_RXATTRWALK(r1, &(0x7f00000012c0)={0xf, 0x1f, 0x2, 0x96a7}, 0xf) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x440080) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000040)=0x1008) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001200)={r3, 0x40000000000, 0x9}, &(0x7f0000001240)=0x8) ioctl$CAPI_INSTALLED(r1, 0x80024322) 02:21:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) 02:21:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf000000) 02:21:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@local, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) r2 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x6a200) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000200)={0x1, {0x0, 0x1c9c380}, 0x5, 0x8}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x3, 0x9, 0xffffffff, 0x6, 0x8}) [ 1113.054207] binder: 14333:14335 ioctl 801c581f 20000000 returned -22 [ 1113.067634] binder: 14333:14338 ioctl 801c581f 20000000 returned -22 02:21:24 executing program 0: socket$inet6(0xa, 0x0, 0x40000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0x2f1}, &(0x7f0000000300)}, 0x191) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x141000, 0x0) r2 = syz_open_dev$dspn(&(0x7f00000004c0)='/dev/dsp#\x00', 0x288dab09, 0x800) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd}) io_setup(0x9, &(0x7f0000000480)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\'', 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x0, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x100000000, 0x0, 0x8, 0xffffffffffffd5c2, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x0, 0xb) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x70, 0x401, 0x0, 0x40, 0x9, 0x0, 0x9, 0x1, 0x6, 0x8000, 0x0, 0x200, 0xe2, 0x9, 0x0, 0x1d9, 0x80, 0x4, 0x8000, 0x0, 0x9, 0x9, 0x0, 0x6, 0x2, 0x5, 0x6d23, 0x3, 0x6205, 0xff, 0x5, 0x8, 0x2, 0x4b7, 0x5, 0x7f, 0x4, 0x0, 0x3, 0x2, @perf_config_ext={0x401, 0x1ff}, 0x10, 0x5, 0x2, 0x7, 0x5, 0xfffffffffffffffe, 0x7}, r2, 0x7, r0, 0x0) ioctl(r5, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x20110, r0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x100000000, 0x8000, 0xff, 0xf1, 0x800, 0x10001, 0x4}, 0x1c) close(r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x5}, 0x20) getresuid(&(0x7f0000000440), &(0x7f0000000140), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 02:21:24 executing program 3: r0 = socket$kcm(0xa, 0x400000000000002, 0x73) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040), 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty={[0xfe80]}}, 0x5f) 02:21:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7f7cd4081700) 02:21:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0x5451, 0x0) 02:21:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="abd8e6da244a60b08db48734038949692b1ddb593aa40387f8112419a3e04ef069fe9a570f8fe75cc7a02eb07ddbb771386a5d39181cb3ba0a084aa7da871ebedcd50060ca2e68a437b92fd87e6b0e73dbc1124b23a6bbeaeedfd93b9ef55c3624277b47875b3ba2268beae68b3f5f0d0136069a9663ef8fa42988cce77f0681e739e1c1bd1a1270549b7362dd95a2a1e3246946b1e1aa45cde650115c33bae6d148ae99b6f6ba6ac51722a4d4fa7ba4cf04cdafb781607b48e9411b5d672ef294b6c11296ed937fcc31a0", 0xcb}, {&(0x7f0000000000)="cf26e3cf27e8778484ff3913052cb12a88bc4c8f1922bb711727bacf3d02", 0x1e}, {&(0x7f0000000180)="e47b16178d8f1c2346303fb09969dd0978a911a6374879373c8208c74bab868c7f99f7af484142", 0x27}, {&(0x7f00000001c0)="8881b29bf14c1a8c6b058c61e895f0b460fa41c7e2e1a1d850e08bdb47dba944fcd03e7681debba72c0b0dbf6c", 0x2d}, {&(0x7f0000000200)="960336da1ddbad9c56d8dc6b607a49f76328349b8c965090f8758363c7dd7b44ec", 0x21}, {&(0x7f0000000240)="cc55b96165c347af3334ea83f275818a4fa1a42948b820cd9bed3f7bf91f22630b19da7609ebdeb762b6562dee0e04e16602d3b209dfa82eb8b4d3482a177110dee1aca7bb2616f5831fcf9d2bb109ff80d56040b397cbf0fedf17e19259b2db2400f839c2a1", 0x66}], 0x6, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:21:25 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000100)=""/203, &(0x7f0000000000)=0xcb) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000280)={0x1, 0x5}) 02:21:25 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:25 executing program 2: syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x41e36e24, 0x200802) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x401, 0x40000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:21:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) 02:21:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000000) 02:21:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r0) openat$kvm(0xffffffffffffff9c, 0x0, 0x7f, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 02:21:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r0) openat$kvm(0xffffffffffffff9c, 0x0, 0x7f, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 02:21:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'\x00\xacs\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0xc201}) ioctl$TUNGETSNDBUF(r0, 0x400454e2, 0x0) 02:21:25 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x8d4, 0x100) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x117) shutdown(r1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10010, r1, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, 0xffffffffffffffff, 0x0) 02:21:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) 02:21:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf00) 02:21:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r0) openat$kvm(0xffffffffffffff9c, 0x0, 0x7f, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 02:21:25 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x11, 0x0, 0x20, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000300)={0x1, 'C'}, 0x2) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x15500c0}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020126bd7000fedbdf0000000c00020000000000b97cdf0f0c00030008000000000000000c0002006f06000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x8200, 0x0) ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f00000000c0)={0x14, 0x1000, &(0x7f00000023c0)="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"}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e21, 0x3bae41e6, @mcast1, 0x8}, {0xa, 0x4e23, 0x14001, @local, 0xfff}, 0x4, [0x4abd, 0x2, 0x15, 0x9, 0x9, 0x8, 0xffffffffffffff81, 0x8]}, 0x5c) sendmsg$alg(r5, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r5, &(0x7f0000000300)=ANY=[], 0xffffffaa) write$FUSE_POLL(r6, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0x8, {0x8}}, 0x18) 02:21:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) getuid() write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x1, r2, 0x30, 0x1, @ib={0x1b, 0x80000001, 0xff, {"5f8ed697474d2d2edf8d8341695e4032"}, 0x3, 0x8001, 0x3}}}, 0xfffffffffffffdd6) write$P9_RREAD(r1, &(0x7f0000000000)={0x31, 0x75, 0x2, {0x26, "f3bd0a1c7dee25aef30445fc885aa713569f027961675a5894898360bca079769ac6e44c3ead"}}, 0x31) [ 1114.304842] QAT: Invalid ioctl 02:21:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 02:21:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x20000000004, 0x10, r0, 0x0) 02:21:26 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) 02:21:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc) 02:21:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x2012, r0, 0x0) 02:21:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 02:21:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x101, 0x200000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='.\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000800)=0x4, 0x4) sendto$inet6(r2, &(0x7f0000e77fff), 0x0, 0x20000008, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/36, 0x24}, {&(0x7f00000003c0)=""/117, 0x75}], 0x2, &(0x7f00000006c0)=""/78, 0x4e}, 0x10020) statx(0xffffffffffffffff, &(0x7f0000000280)='./bus/../file0\x00', 0x0, 0x7ff, &(0x7f00000002c0)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r5, 0x501, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) fallocate(r4, 0x20, 0x0, 0x8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) ftruncate(0xffffffffffffffff, 0x7fff) getsockname$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f00000004c0)=0x440) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000180)={0x1, {}, 0x8000, 0x9}) socket$inet_dccp(0x2, 0x6, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000000)="a1de4e7f9ff96d5cc734df127c0121f043c387fa7d90a31bc6a1ca460a0a81d964f70cf40bf738b447cdf0ea36", 0x2d) socket$inet6(0xa, 0x5, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)={r6}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x71, &(0x7f0000000900)=[@in6={0xa, 0x4e24, 0x7f, @ipv4={[], [], @loopback}, 0x80000000}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0x800, @local}, @in6={0xa, 0x4e21, 0xba82, @ipv4={[], [], @multicast1}, 0x8}], 0x64) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\r\x00\x00\x00\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000540)=[0x2, 0xffffffffffff8000, 0x2b47], 0x3, 0x3, 0x2, 0x800, 0x1200000000000000, 0x3f7b, {0x40, 0x3, 0x0, 0x200, 0x41, 0x3, 0x6, 0x2, 0x1, 0x6, 0x400, 0x7, 0xda8, 0x2, "55c4f03cfa1dc345e613a81f5484608d11d123567008be957530b227c2527fb1"}}) 02:21:26 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000400)={0x5, &(0x7f0000000080)=""/75, &(0x7f0000000380)=[{0x520, 0x49, 0x401, &(0x7f0000000100)=""/73}, {0x8, 0x77, 0xffffffff, &(0x7f0000000180)=""/119}, {0x7, 0x9, 0x5, &(0x7f0000000200)=""/9}, {0x1, 0x1c, 0x5, &(0x7f0000000240)=""/28}, {0x401, 0xfa, 0x0, &(0x7f0000000280)=""/250}]}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:21:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff) [ 1114.765693] bond0: Releasing backup interface bond_slave_1 [ 1115.096340] QAT: Invalid ioctl 02:21:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) 02:21:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80401, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0x9, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:21:26 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@flushsa={0xec, 0x1c, 0x301, 0x70bd28, 0x25dfdbfc, {0x2b}, [@extra_flags={0x8, 0x18, 0x8}, @algo_comp={0xa4, 0x3, {{'deflate\x00'}, 0x2c8, "e62f7f6a0eac0ea52b258b67b0b2de3a4033f7426fec3dbdb68df803c7faa05b9e93617c39477347558dbd15fa510aeabc9fd73378bde90eea329d838a31f075cd0ade619ea0662a98016bbd34dc9ad5d9f49b85bd899aff43"}}, @user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in=@local, 0x0, 0xa}}]}, 0xec}}, 0x50) r1 = socket(0x400000000010, 0x3, 0x0) socket(0x2, 0x80000, 0x7fff) write(r1, &(0x7f0000000240)="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", 0xd3026a3b3bc6809d) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x30100, 0x180) write$cgroup_int(r2, &(0x7f0000000040)=0x9, 0x12) 02:21:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x18) [ 1115.199409] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1115.220595] bond0: Releasing backup interface bond_slave_1 02:21:27 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x9, 0x880) fcntl$notify(r0, 0x402, 0x80000002) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r2, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000080)=0x2, 0x8) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x110810, r1, 0x0) 02:21:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10100228}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xc001}]}}}]}, 0x3c}}, 0x0) 02:21:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) 02:21:27 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x5, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:21:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2) 02:21:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) 02:21:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x101, 0x200000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='.\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000800)=0x4, 0x4) sendto$inet6(r2, &(0x7f0000e77fff), 0x0, 0x20000008, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/36, 0x24}, {&(0x7f00000003c0)=""/117, 0x75}], 0x2, &(0x7f00000006c0)=""/78, 0x4e}, 0x10020) statx(0xffffffffffffffff, &(0x7f0000000280)='./bus/../file0\x00', 0x0, 0x7ff, &(0x7f00000002c0)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r5, 0x501, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) fallocate(r4, 0x20, 0x0, 0x8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) ftruncate(0xffffffffffffffff, 0x7fff) getsockname$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f00000004c0)=0x440) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000180)={0x1, {}, 0x8000, 0x9}) socket$inet_dccp(0x2, 0x6, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000000)="a1de4e7f9ff96d5cc734df127c0121f043c387fa7d90a31bc6a1ca460a0a81d964f70cf40bf738b447cdf0ea36", 0x2d) socket$inet6(0xa, 0x5, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)={r6}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x71, &(0x7f0000000900)=[@in6={0xa, 0x4e24, 0x7f, @ipv4={[], [], @loopback}, 0x80000000}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0x800, @local}, @in6={0xa, 0x4e21, 0xba82, @ipv4={[], [], @multicast1}, 0x8}], 0x64) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\r\x00\x00\x00\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000540)=[0x2, 0xffffffffffff8000, 0x2b47], 0x3, 0x3, 0x2, 0x800, 0x1200000000000000, 0x3f7b, {0x40, 0x3, 0x0, 0x200, 0x41, 0x3, 0x6, 0x2, 0x1, 0x6, 0x400, 0x7, 0xda8, 0x2, "55c4f03cfa1dc345e613a81f5484608d11d123567008be957530b227c2527fb1"}}) [ 1115.755492] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1115.763694] netlink: 'syz-executor3': attribute type 1 has an invalid length. 02:21:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x501600, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x2d) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x42400, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x4, 0x4) [ 1115.880932] bond0: Releasing backup interface bond_slave_1 02:21:27 executing program 3: r0 = memfd_create(&(0x7f0000000040)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x82) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000280)=0x0) sched_rr_get_interval(r4, &(0x7f00000002c0)) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000240)={0x4, &(0x7f0000000180)=[{}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x11, 0x64000000}, 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) dup2(r1, r0) 02:21:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0x2, 0x0) 02:21:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6) [ 1116.038619] binder: 14533:14534 ioctl 81009431 20000100 returned -22 02:21:27 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfsL', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1116.130987] binder: 14533:14534 ioctl 81009431 20000100 returned -22 02:21:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2012, r0, 0x0) 02:21:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 02:21:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x8010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01634040010000000000000004000000000000000000000010000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000003200000000000000"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="68000000000000002800000000000000200000000000000018000000000000004000000000000000"], @ANYBLOB="00634040010000000000000001000000000000000000000010000000000000000000000000000000000000000800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="2484f23c03cca87e9773567908a8f224d5a070b74945fcd56d3433bc232d5b671995fdc000a51e85098cc870eb26cff1f85d26706437a3f9e10c363bd3521df28d4322b3378bbf640d25ff0f70fa41a67792c5f69bc0849bbb7847a3d5e02ec00c6416a95677701c5b8ffdfae24690c4ecbf72bb537e69efade2afecdd553ec70cdde50eb2092a75ecb2d2837fdcf5d8dbc19df9870b730779b7d24ff3027b4a145dea5f0ebc66aafa92f616f152121af73f9e9576400ef6e2d8f01737e0c4f352e26ad95541e04a08da65738beaec8639d2343b7d8059dadfb854abe9414012b78dba5ec80456230d0319"], @ANYBLOB="08631040", @ANYRES64=r1, @ANYBLOB="0100000000000000"], 0x94, 0x0, &(0x7f0000000400)="3b119319df532a451b6abff31efa0525504070dd9326f2bf6bba855e1ed9cb15d53c6e253bae677a1dd71d8d9360130968ea26ebad0b1bc79a52b672242480c2868d59ef99003ddd9080e41979b52170bb72ba8f31356d11f23c4c2e2564a9ef7d760897be146f48b9262d4d217a539eb5ecf500b6e9a9c070c92764087b60d2101f2846c75697d2a5e9a42476913a6238086551"}) 02:21:28 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x03', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) [ 1116.508230] binder_transaction: 3 callbacks suppressed [ 1116.508240] binder: 14566:14568 got reply transaction with no transaction stack [ 1116.547123] binder: 14566:14568 transaction failed 29201/-71, size 40-40 line 2801 02:21:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0x5452, 0x0) 02:21:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000000) 02:21:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x101, 0x200000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='.\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000800)=0x4, 0x4) sendto$inet6(r2, &(0x7f0000e77fff), 0x0, 0x20000008, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/36, 0x24}, {&(0x7f00000003c0)=""/117, 0x75}], 0x2, &(0x7f00000006c0)=""/78, 0x4e}, 0x10020) statx(0xffffffffffffffff, &(0x7f0000000280)='./bus/../file0\x00', 0x0, 0x7ff, &(0x7f00000002c0)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r5, 0x501, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) fallocate(r4, 0x20, 0x0, 0x8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) ftruncate(0xffffffffffffffff, 0x7fff) getsockname$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f00000004c0)=0x440) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000180)={0x1, {}, 0x8000, 0x9}) socket$inet_dccp(0x2, 0x6, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000000)="a1de4e7f9ff96d5cc734df127c0121f043c387fa7d90a31bc6a1ca460a0a81d964f70cf40bf738b447cdf0ea36", 0x2d) socket$inet6(0xa, 0x5, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)={r6}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x71, &(0x7f0000000900)=[@in6={0xa, 0x4e24, 0x7f, @ipv4={[], [], @loopback}, 0x80000000}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0x800, @local}, @in6={0xa, 0x4e21, 0xba82, @ipv4={[], [], @multicast1}, 0x8}], 0x64) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\r\x00\x00\x00\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000540)=[0x2, 0xffffffffffff8000, 0x2b47], 0x3, 0x3, 0x2, 0x800, 0x1200000000000000, 0x3f7b, {0x40, 0x3, 0x0, 0x200, 0x41, 0x3, 0x6, 0x2, 0x1, 0x6, 0x400, 0x7, 0xda8, 0x2, "55c4f03cfa1dc345e613a81f5484608d11d123567008be957530b227c2527fb1"}}) 02:21:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:21:28 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) 02:21:28 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1116.929286] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:21:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000080)={0x1, 0x6}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) kexec_load(0x7fff, 0x8, &(0x7f00000015c0)=[{&(0x7f00000000c0)="8ab0c9dcea8c21b03499b07acc1c9a733b2ff341aae254e1a183fd", 0x1b, 0x80000001, 0x4}, {&(0x7f0000000100)="aa886e6c884b2e8a8299b258615b558fdfd36956b24d9ecf7be723e18a1d5dbc19f3fe1aabd17338cd322d267e909c5168ac1d8d08defbcea3f197d967ac47216ff3d4aa6c8095dc5d1ddf", 0x4b, 0x2, 0x6}, {&(0x7f0000000180)="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", 0x1000, 0x0, 0x1}, {&(0x7f0000001180)="5d668c3569c0897d9981c6e33cddd86a2322025c7c323aaf609882c9fae440ad02087bb806c9cd91503d61ba6bdade194bc5877e4b6285cabfe3858d05852a0dd6f32755b08e65cadcc548e44fa9795b069ed6ef9082114083f98c083dc5b3b2ffceadceeca8113d6c3532f16c629cc2379e37dca9b71e383ddaf75727257b94b601bb82f0e446172d12e19d36", 0x8d, 0x8000, 0x5d9}, {&(0x7f0000001240)="560ca71b9a7cb698e7e62c03475e9332bc436e72e887bde38f4f285da8b24242e21fcf7aab51db89e2a307144459f55465c610c92608572b9531ccb667458654a6fd686b7a0b7855672b23fe6b444ad938c165187c100cdac8f0ad47fb3f534c116c9c241dd36359ede46858d8a2bedbdd65ee16b2c1838d71c803f338510bc163964deeeafb923678c3ca7ce9", 0x8d, 0x4, 0x1ff}, {&(0x7f0000001300)="2f53e61fd06a4a4844339855d87962ec349700ae6e5cda13eaede0c8a462ff8a37797e7eaf48bf052dd3428e89a259449fab8ed3f4796bce272dd2653d956652488660b1e7c2cfcfa49e26cf4c0e2ce0913e6d52ceeea869725868fcd25187ed6f626c57df64e9d5f49ef189641d7a574aadcb936d7b4b7ffeaa3300838c25327ea9bc6d6393efa19abadfaa04dbca9b", 0x90, 0x0, 0x7fffffff}, {&(0x7f00000013c0)="9bc3366b4ae6fd106ac3baeac48e3807e27b5ebb26a193cea11a6c0428be9f34cb3842a566d5da4b6b2835564c721a506f4851f38aa6fb470826f1edfbab719d959291a945f6ee65e0ba3b0a73059f6174a8c338542ec31105275d857102ddf9266ab0ce56e01a4e2dad5a4d8c00b9a338ca034eb184b09e7769d5bf3cc34ffa4a848dbf6d89a1fa67705079153265eb7d23b94062ba8d21292850d69e0abcdc09a5372e57ced9ba18d12fa98a6b0662f7a386e71a1dc2a0e81b6a26a41aaf93f69f74c3fb5754", 0xc7, 0x7, 0x3}, {&(0x7f00000014c0)="34ab50a689dd45db9374e019e72fbbda4439d4d1322ffe7fcc5801ec2b9d629fb4dbaed9c52fb1d939f1bc53bbf902d9db8caf29089ae995ef4b62e61e67dfc8d517098146271a9ce0c37f6ff27e06407c897bb4f7a076bcb4e8bbc0a58661ce80a03899911dbadd11bd142f016a78ccf00436cc891a1682d242c9858e15a5a9d7eb9e9a5cb476a9e143619f9bd12d2b1009bfa9d4c07a71a268fec669081c25d6f5183018dcb3462a6a5967c8aa507fc542a1fe951d3a9c86a92395b13362a25c2f7e486707e87e2312", 0xca, 0xffffffffffff0001, 0x8000}], 0x0) [ 1117.072933] bond0: Releasing backup interface bond_slave_1 [ 1117.188850] FS-Cache: Duplicate cookie detected [ 1117.194811] FS-Cache: O-cookie c=00000000fde18764 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1117.203148] FS-Cache: O-cookie d=00000000869bc68d n=000000004de7d484 [ 1117.209803] FS-Cache: O-key=[10] '0200020000807f000008' [ 1117.216091] FS-Cache: N-cookie c=000000005c731339 [p=000000004f092a8c fl=2 nc=0 na=1] [ 1117.224237] FS-Cache: N-cookie d=00000000869bc68d n=000000008fe7a69e [ 1117.230891] FS-Cache: N-key=[10] '0200020000807f000008' 02:21:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0x5421, 0x0) 02:21:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300) 02:21:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) 02:21:29 executing program 2: r0 = socket(0x3, 0x7, 0x7fff) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'team0\x00', 0x9}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x401}) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r2, 0x0) 02:21:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000040)=0x8, 0x1, 0x3) 02:21:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x101, 0x200000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='.\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000800)=0x4, 0x4) sendto$inet6(r2, &(0x7f0000e77fff), 0x0, 0x20000008, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/36, 0x24}, {&(0x7f00000003c0)=""/117, 0x75}], 0x2, &(0x7f00000006c0)=""/78, 0x4e}, 0x10020) statx(0xffffffffffffffff, &(0x7f0000000280)='./bus/../file0\x00', 0x0, 0x7ff, &(0x7f00000002c0)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r5, 0x501, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) fallocate(r4, 0x20, 0x0, 0x8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) ftruncate(0xffffffffffffffff, 0x7fff) getsockname$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f00000004c0)=0x440) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000180)={0x1, {}, 0x8000, 0x9}) socket$inet_dccp(0x2, 0x6, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000000)="a1de4e7f9ff96d5cc734df127c0121f043c387fa7d90a31bc6a1ca460a0a81d964f70cf40bf738b447cdf0ea36", 0x2d) socket$inet6(0xa, 0x5, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)={r6}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x71, &(0x7f0000000900)=[@in6={0xa, 0x4e24, 0x7f, @ipv4={[], [], @loopback}, 0x80000000}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0x800, @local}, @in6={0xa, 0x4e21, 0xba82, @ipv4={[], [], @multicast1}, 0x8}], 0x64) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\r\x00\x00\x00\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000540)=[0x2, 0xffffffffffff8000, 0x2b47], 0x3, 0x3, 0x2, 0x800, 0x1200000000000000, 0x3f7b, {0x40, 0x3, 0x0, 0x200, 0x41, 0x3, 0x6, 0x2, 0x1, 0x6, 0x400, 0x7, 0xda8, 0x2, "55c4f03cfa1dc345e613a81f5484608d11d123567008be957530b227c2527fb1"}}) 02:21:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000) 02:21:29 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0x5460, 0x0) 02:21:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x20000, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2001000, 0x10002012, r0, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x80000000, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='!wlan0^ppp0/ppp0-#)\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x81, 0x5d, 0xe5bf, 0x1e78, 0x10000, 0x3, 0x8, 0x8, 0x7ff, 0x6, 0x3f}, 0xb) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101401, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000006, 0x10001c, r2, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) 02:21:29 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1117.833269] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1117.915095] FS-Cache: Duplicate cookie detected [ 1117.920074] FS-Cache: O-cookie c=00000000e2363814 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1117.928641] FS-Cache: O-cookie d=00000000869bc68d n=00000000f0342c42 [ 1117.935346] FS-Cache: O-key=[10] '0200020000807f000008' [ 1117.941355] FS-Cache: N-cookie c=0000000072bd290e [p=000000004f092a8c fl=2 nc=0 na=1] [ 1117.949781] FS-Cache: N-cookie d=00000000869bc68d n=0000000071c6fa8a [ 1117.956535] FS-Cache: N-key=[10] '0200020000807f000008' [ 1117.991925] bond0: Releasing backup interface bond_slave_1 02:21:29 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="87b272c2bb997f6abfd70aed86d4804bb0f7af2e6d840fcca5240dede0e12926fef66b79f2a098e54877b8e639c8c9fc3a0cf165790f7ce8fd76479ad21beef00bfcf8f1c3af9a512cf2adf31ea317c2c46358f41315c518adbec81662eba2f3ee328ed0328acc245c04c2fe02d65c10356116a7b1a6dddf3004e3a6a91c72b75b1f166e5407e3aad8f09ddee93c832124f1a267ea35b36d3243e7bc69590dcfb095ed349c4bb74ee9cfc04c6c15c17b43c468110b14", 0xb6, 0xfffffffffffffffb) r2 = request_key(&(0x7f00000001c0)='.dead\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='posix_acl_accessem1(#]\x00', 0xfffffffffffffff9) keyctl$unlink(0x9, r1, r2) 02:21:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc00000000000000) 02:21:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) [ 1118.199484] binder_alloc: binder_alloc_mmap_handler: 14671 20ffd000-21000000 already mapped failed -16 02:21:30 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) r2 = geteuid() stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$usb(&(0x7f0000000340)='/dev/bus/usb/00#/00#\x00', 0x9, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x4, 0x800) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x1f, 0x1dee, 0x7fff, 0xff, 0xc, 0xffffffffffffff9c, 0x3}, 0x2c) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000400)='/dev/udmabuf\x00', 0x2) r10 = fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000540)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getpgrp(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000700)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) r16 = socket(0x1, 0x80001, 0xde) r17 = syz_open_dev$mice(&(0x7f0000000d80)='/dev/input/mice\x00', 0x0, 0x400200) r18 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/rfkill\x00', 0x20000, 0x0) r19 = syz_open_dev$sndpcmc(&(0x7f0000000e00)='/dev/snd/pcmC#D#c\x00', 0x20, 0x0) r20 = syz_open_dev$usb(&(0x7f0000000e40)='/dev/bus/usb/00#/00#\x00', 0x94f0, 0x2000) r21 = socket$inet(0x2, 0x6, 0x5) r22 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000e80)=@abs, &(0x7f0000000f00)=0x6e, 0x800) r23 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/cuse\x00', 0x2, 0x0) r24 = syz_open_dev$admmidi(&(0x7f0000000f80)='/dev/admmidi#\x00', 0x8, 0x800) r25 = getpgid(0x0) lstat(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000001080)=[0xee00, 0xffffffffffffffff]) r28 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000010c0)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000011c0)=0xe8) r30 = getgid() r31 = syz_open_dev$sndmidi(&(0x7f0000001200)='/dev/snd/midiC#D#\x00', 0x7, 0x82) r32 = socket$packet(0x11, 0x3, 0x300) r33 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r34 = socket$caif_seqpacket(0x25, 0x5, 0x3) r35 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r36 = socket$rxrpc(0x21, 0x2, 0x2) r37 = creat(&(0x7f0000001280)='./file0\x00', 0x50) r38 = socket$inet6_tcp(0xa, 0x1, 0x0) r39 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001380)='/dev/mISDNtimer\x00', 0x20000, 0x0) r40 = getpgid(0xffffffffffffffff) r41 = getuid() fstat(0xffffffffffffff9c, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r43 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001440)='/dev/autofs\x00', 0x400, 0x0) r44 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001480)='/dev/vcs\x00', 0x10840, 0x0) r45 = openat$rtc(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/rtc0\x00', 0x400000, 0x0) r46 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000017c0)={{{@in=@empty, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4}}, &(0x7f00000018c0)=0xe8) getresgid(&(0x7f0000001900), &(0x7f0000001940)=0x0, &(0x7f0000001980)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000019c0)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001a00)={0x0, 0x0}, &(0x7f0000001a40)=0xc) getresgid(&(0x7f0000001a80)=0x0, &(0x7f0000001ac0), &(0x7f0000001b00)) r52 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/video36\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000001b80)=0x0) getresuid(&(0x7f0000001bc0), &(0x7f0000001c00), &(0x7f0000001c40)=0x0) fstat(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r56 = getpgid(0x0) r57 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001d00)={0x0, 0x0, 0x0}, &(0x7f0000001d40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001d80)={0x0}, &(0x7f0000001dc0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000001e80)=[0xffffffffffffffff]) sendmmsg$unix(r0, &(0x7f0000001f80)=[{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000100)="ff75c19f892605db22369ab716b92bd3a0e7dc466a588b1fbd481f3a0f56c915d12df0f73b9b0c8c261a2e1e2b7d2a479d0f89f316cb31771ea9a9715ed08a0cfaa3448f18733ebe75f570ec60fd4dfae510771da7286f27dbea8c0e32df7ef0c31cb0ff", 0x64}, {&(0x7f0000000180)="cad80d5aeb19920f23433c7a70a429678fb001cf5f8fc8aa1fd268a0a17b4a3e27d58dff3edabf0281dfeb3e540d82b306bfaf85e64a995485493983db30b9be2a1e67bcd183a9970cb75b3a46ec904799fe175f90457f2d61dfed7fcc9d4111", 0x60}], 0x2, &(0x7f00000007c0)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @rights={0x20, 0x1, 0x1, [r4, r5, r6]}, @rights={0x20, 0x1, 0x1, [r7, r8, r9]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r15}], 0xa0, 0x40008c0}, {&(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000900)="ba0f98e1e5899ef292d8faf07cef4ad7b8f4448e859081ff30a62562c748abadf248985efe9b88ef82d48d0a09b0bfb638673f42285ea2f052469cd4736fc6a696d41285cb5ffca124b8c094358edb7ce1f95a849d3e906ce54b9d5b2e5b284d3fc58ac630220f5f786bb074f835b345442ae29babeb4829e5aac4593833d37a3d0d76b526afe64fbdfb6a22fc782146fe158ad9b74652ce2600213f", 0x9c}, {&(0x7f00000009c0)="6aea7361e2052ce30ee3b1ee98b63c027292580f62ad2256776c71bb4d44b98c2df125be7ac3", 0x26}, {&(0x7f0000000a00)}, {&(0x7f0000000a40)="328cbdafb2730f7670bc19c90c2f967a9bb3bbe09fe611f892c6fa3a689df0a6cde97a2f873f60d94f3f6818b1c01568dad863fe14579b999fd7eb2beb9400f672ea2a9c23a8b4b3dd71fdfdddb007ce6bdcdded98d19d04bbac2db8f0270b91b270fa27299eb565495e0e7de9b95be2e7f62242cfda7ca4b9b3cc870a7f03486c34033870c6683cb32646", 0x8b}], 0x4, 0x0, 0x0, 0x4b76074645fa9568}, {&(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="fb234279f57dd288fe0ea261dcce8a97d26d467cdf4b52fb861ce1977c8fc3e4c123ea7db301dc1cfaf682c4f1f86635be42a25843ac4c7bcf1f92338fc08245ab5b443f82840a7cf016bf21bc9255fe9c549c6693f8b9e24cacc00847b4ceb0e873ddfa8e889992e620f16f773203cc877ef656c1603dc8923a4922c244601865848804abede7f0126b7a37723aff681ad7a6b440e140105ec2a0b375bb520d228a114c61", 0xa5}, {&(0x7f0000000c80)="d54622152463ed26a2252dee39ac2458d1448077517020b102739251f15da8871c949d8aabeb4dd5bafc8a2f24b6d6fdfd92c603426c3765151a68e0323f58f060791a6de96958497c1337cda0f2805e4a213cc5383c13c4eac2af1de707d2424f6a2959aaf1ea9807c26bed27e7c66be7fdaa2b505ea217a1db", 0x7a}, {&(0x7f0000000d00)}], 0x3, &(0x7f0000001500)=[@rights={0x28, 0x1, 0x1, [r16, r17, r18, r19, r20, r21]}, @rights={0x20, 0x1, 0x1, [r22, r23, r24]}, @cred={0x20, 0x1, 0x2, r25, r26, r27}, @cred={0x20, 0x1, 0x2, r28, r29, r30}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, r31, r32, r33]}, @rights={0x28, 0x1, 0x1, [r34, r35, r36, r37, r38, r39]}, @cred={0x20, 0x1, 0x2, r40, r41, r42}, @rights={0x20, 0x1, 0x1, [r43, r44, r45]}], 0x110, 0x8080}, {&(0x7f0000001640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f00000016c0)="5f8f1498f6111fb6f49d5bb351e79005cad0c1d0266becb091db3ac4ea3a44e7347c115c722ef0dc9c89eb337912525f913953f09b5489429d37a7a2e0b587fc33142cabfa9215823860d22613e50df3e6089f64edd635f74f86a43ddf754ed512b0208ee4996c1fd5bada60d8c8810c931a0112f2b1f6cb4858b79af7747472edf0709a0710a32a513ade670904b037b24d8aa946a40d74e855768015a17878bc3370aac39b4655c11891f95f40c16b9b8642cd97a6b8", 0xb7}], 0x1, &(0x7f0000001ec0)=[@cred={0x20, 0x1, 0x2, r46, r47, r48}, @cred={0x20, 0x1, 0x2, r49, r50, r51}, @rights={0x18, 0x1, 0x1, [r52]}, @cred={0x20, 0x1, 0x2, r53, r54, r55}, @cred={0x20, 0x1, 0x2, r56, r57, r58}, @cred={0x20, 0x1, 0x2, r59, r60, r61}], 0xb8, 0x11}], 0x4, 0x20000004) r62 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r62, 0x0) 02:21:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc00) 02:21:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0x40049409, 0x0) [ 1118.527416] binder_alloc: binder_alloc_mmap_handler: 14683 20ffd000-21000000 already mapped failed -16 02:21:30 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000000000080000, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000400)={0x8, 0x7, 0x3800, 0x2, 0x8, 0x596}) connect$pppoe(r0, &(0x7f0000000340)={0x18, 0x0, {0x3, @remote, 'nlmon0\x00'}}, 0x1e) setsockopt$inet6_dccp_int(r0, 0x21, 0x2000000011, &(0x7f00000001c0)=0xffffffffffffffc1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x13f, 0xa}}, 0x20) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000140)=0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000003140)={@mcast2, 0x0}, &(0x7f0000003180)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000031c0)={@remote, r2}, 0x14) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x45b1, 0x103000) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0xffffffffffffffe0, 0xfa00, {r1, 0x4}}, 0xff9b) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000003c0)=0x6) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)=0xfeffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000280)={0xa30000, 0x8, 0x5, [], &(0x7f0000000240)={0x9d0bff, 0x8, [], @ptr=0x1}}) 02:21:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x18000000) 02:21:30 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x18', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:30 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) write(r4, &(0x7f0000000480), 0x7536aeb8) splice(r0, &(0x7f0000000180), r2, &(0x7f00000001c0), 0x401, 0xd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 02:21:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2011, r0, 0x20000000) 02:21:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) [ 1118.769896] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:21:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x84000, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 02:21:30 executing program 0: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001e40), 0x4) r1 = dup(r0) r2 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) r3 = dup(r2) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x9a6}, &(0x7f0000000080)=0x8) recvmmsg(r3, &(0x7f00000051c0)=[{{&(0x7f0000000100)=@can, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/204, 0xcc}], 0x1, &(0x7f00000002c0)=""/164, 0xa4}, 0x3b6e}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)}, {&(0x7f00000003c0)=""/249, 0xf9}, {&(0x7f00000004c0)=""/228, 0xe4}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f00000006c0)=""/85, 0x55}], 0x5, &(0x7f00000007c0)=""/211, 0xd3}, 0x2}, {{&(0x7f00000008c0)=@ax25={{0x3, @rose}, [@remote, @default, @rose, @default, @netrom, @bcast, @bcast]}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/85, 0x55}, {&(0x7f00000019c0)=""/254, 0xfe}], 0x3, &(0x7f0000001b00)=""/235, 0xeb}, 0x5}, {{&(0x7f0000001c00)=@l2, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c80)=""/99, 0x63}, {&(0x7f0000001d00)=""/242, 0xf2}], 0x2, &(0x7f0000001e40)}, 0x7f}, {{&(0x7f0000001e80)=@l2, 0x80, &(0x7f0000003080)=[{&(0x7f0000001f00)=""/208, 0xd0}, {&(0x7f0000002000)=""/13, 0xd}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/48, 0x30}], 0x4, &(0x7f00000030c0)=""/218, 0xda}}, {{0x0, 0x0, &(0x7f0000004480)=[{&(0x7f00000031c0)=""/188, 0xbc}, {&(0x7f0000003280)=""/31, 0x1f}, {&(0x7f00000032c0)=""/47, 0x2f}, {&(0x7f0000003300)}, {&(0x7f0000003340)=""/194, 0xc2}, {&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/53, 0x35}], 0x7, &(0x7f0000004500)=""/150, 0x96}, 0x100}, {{&(0x7f00000045c0)=@hci, 0x80, &(0x7f0000004b40)=[{&(0x7f0000004640)=""/157, 0x9d}, {&(0x7f0000004700)=""/131, 0x83}, {&(0x7f00000047c0)=""/41, 0x29}, {&(0x7f0000004800)=""/193, 0xc1}, {&(0x7f0000004900)}, {&(0x7f0000004940)=""/232, 0xe8}, {&(0x7f0000004a40)=""/58, 0x3a}, {&(0x7f0000004a80)=""/155, 0x9b}], 0x8, &(0x7f0000004bc0)=""/29, 0x1d}, 0x3}, {{&(0x7f0000004c00)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000005100)=[{&(0x7f0000004c80)=""/99, 0x63}, {&(0x7f0000004d00)=""/210, 0xd2}, {&(0x7f0000004e00)=""/234, 0xea}, {&(0x7f0000004f00)=""/116, 0x74}, {&(0x7f0000004f80)=""/226, 0xe2}, {&(0x7f0000005080)=""/72, 0x48}], 0x6, &(0x7f0000005180)=""/16, 0x10}, 0x9}], 0x8, 0x3, &(0x7f00000053c0)={0x0, 0x989680}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r4, 0x3, 0x20}, 0xc) syz_open_dev$ndb(&(0x7f0000000380)='/dev/nbd#\x00', 0x0, 0x180) 02:21:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) 02:21:30 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x8c', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:21:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x100, 0x0) r1 = msgget(0x3, 0x4) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000340)=""/208) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000026000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000001c0)="64650f01d10f21c13e0fc71ee4e564260533092e0f083e3636650f1811650f01cf0f20d86635200000000f22d80f0138baf80c66b8d0ffdb8566efbafc0c66b80900000066ef", 0x46}], 0x1, 0x0, &(0x7f0000000300)=[@cr4={0x1, 0x40220}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x420100, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)=r4) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, 0x0, 0x8e, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x50000) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) 02:21:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3f00) 02:21:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x200, 0x200000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x581000, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x42201, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) r3 = gettid() r4 = dup3(r0, r0, 0x80000) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000080)={r4, r0, 0x7fff}) [ 1119.411198] QAT: Invalid ioctl [ 1119.454488] QAT: Invalid ioctl 02:21:31 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) write(r4, &(0x7f0000000480), 0x7536aeb8) splice(r0, &(0x7f0000000180), r2, &(0x7f00000001c0), 0x401, 0xd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 02:21:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 02:21:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1800) 02:21:31 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\xff', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffc) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) 02:21:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x100, 0x0) r1 = msgget(0x3, 0x4) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000340)=""/208) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000026000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000001c0)="64650f01d10f21c13e0fc71ee4e564260533092e0f083e3636650f1811650f01cf0f20d86635200000000f22d80f0138baf80c66b8d0ffdb8566efbafc0c66b80900000066ef", 0x46}], 0x1, 0x0, &(0x7f0000000300)=[@cr4={0x1, 0x40220}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x420100, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)=r4) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, 0x0, 0x8e, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x50000) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) 02:21:31 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000000)={0x0, 0x34, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) timer_settime(r0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)) 02:21:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x1100000000000000) 02:21:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffff8000) [ 1119.960345] *** Guest State *** [ 1119.973183] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 02:21:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x2012, r0, 0x0) 02:21:31 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1120.057446] CR4: actual=0x0000000000042040, shadow=0x0000000000040000, gh_mask=ffffffffffffe871 [ 1120.104539] CR3 = 0x0000000000000000 [ 1120.109106] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 02:21:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) [ 1120.154836] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1120.182759] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1120.222558] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 1120.252152] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1120.297288] SS: sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000 [ 1120.334150] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1120.380803] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1120.408557] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1120.416869] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 1120.425138] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 1120.433333] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1120.441896] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1120.450478] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1120.457219] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1120.465049] Interruptibility = 00000000 ActivityState = 00000000 [ 1120.471540] *** Host State *** [ 1120.475059] RIP = 0xffffffff811f97e0 RSP = 0xffff888054027670 [ 1120.481293] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1120.488014] FSBase=00007f4c3d069700 GSBase=ffff8880ae700000 TRBase=fffffe0000033000 [ 1120.496130] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1120.502290] CR0=0000000080050033 CR3=00000000a4793000 CR4=00000000001426e0 [ 1120.509591] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff88001360 [ 1120.516552] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1120.522868] *** Control State *** [ 1120.526610] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 1120.543637] EntryControls=0000d1ff ExitControls=002fefff [ 1120.549277] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1120.557790] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1120.564758] VMExit: intr_info=00000000 errcode=00000000 ilen=00000005 [ 1120.571582] reason=80000021 qualification=0000000000000000 [ 1120.578206] IDTVectoring: info=00000000 errcode=00000000 [ 1120.583977] TSC Offset = 0xfffffda5fa05f353 [ 1120.588557] EPT pointer = 0x00000000a173701e 02:21:32 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) write(r4, &(0x7f0000000480), 0x7536aeb8) splice(r0, &(0x7f0000000180), r2, &(0x7f00000001c0), 0x401, 0xd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 02:21:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x7000000000000) 02:21:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x10002) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:21:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf) 02:21:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x100, 0x0) r1 = msgget(0x3, 0x4) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000340)=""/208) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000026000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000001c0)="64650f01d10f21c13e0fc71ee4e564260533092e0f083e3636650f1811650f01cf0f20d86635200000000f22d80f0138baf80c66b8d0ffdb8566efbafc0c66b80900000066ef", 0x46}], 0x1, 0x0, &(0x7f0000000300)=[@cr4={0x1, 0x40220}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x420100, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)=r4) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, 0x0, 0x8e, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x50000) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) 02:21:32 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000000)={0x6, 0x1e53}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:21:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x4000) 02:21:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1100000000000000) [ 1120.949890] binder: 14856:14858 ioctl 401870c8 20000000 returned -22 [ 1120.995404] binder: 14856:14858 ioctl 401870c8 20000000 returned -22 02:21:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x481fff, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x9, 0x9}]}) 02:21:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x27c585387f0000) 02:21:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x200000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x200, @empty, 0x200}}, 0x4, 0x80000000}, &(0x7f0000000180)=0x90) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f00000003c0)={0x1, 0x0, {0x13, 0x2b, 0x12, 0x1f, 0x7, 0x7, 0x3, 0x147, 0x1}}) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000380)={0xa, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e23, 0x8, @local, 0x7}}}, &(0x7f0000000280)=0x84) r3 = accept4$alg(r1, 0x0, 0x0, 0x800) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x8030, r1, 0x0) setsockopt(r1, 0x100000001, 0xfffffffffffff022, &(0x7f00000002c0)="dc74dcd857dcde99a48112c18f3eded1ec43b6939f19d3dc802e45a7b5e660b57cb023dd2d57ff68017bd30843e0cf5602cc82b1df1f51854def6535843631fe9da05569e4e27bbd1dcdc185f0ae2cc452b874b624b254acbe83", 0x5a) ioctl$void(r3, 0xc0045c79) write$P9_RLOCK(r1, &(0x7f0000000080)={0x8, 0x35, 0x1, 0x1}, 0x8) 02:21:33 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) write(r4, &(0x7f0000000480), 0x7536aeb8) splice(r0, &(0x7f0000000180), r2, &(0x7f00000001c0), 0x401, 0xd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 02:21:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) 02:21:33 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:33 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:33 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8808820}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000629bd700003dbdf2501000000000000000c410000000c001473797a3000000000"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x8052) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f00000001c0)) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r2, 0x0) 02:21:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x6000000000000) [ 1121.732063] binder_alloc: binder_alloc_mmap_handler: 14890 20ffd000-21000000 already mapped failed -16 02:21:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x8040, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000240)={'erspan0\x00', 0x9d7}) syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x20, 0x20001) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="07031300000000040044b3478ee0606f7b6538d9900e43ab0414e120bd38d619fa675e4377b12efbb06a3b512145d549e6320a460b656349eac94097f3592f4cdca036be91767f100e71ad814078"], 0x4e, 0x3) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x2, 0x781}, {0x3, 0x1}, {0x9, 0x3}, {0xc7, 0x7fff}, {0xcd82, 0x1}, {0x6, 0x4}, {0x7, 0xfffffffffffffff9}]}) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000002c0)={0x8, 0x755, 0x6, 0x3, 0x14, 0x101, 0x200, 0x9, 0x3, 0x0, 0x9ba, 0xc544ef9}) [ 1121.792051] FS-Cache: Duplicate cookie detected [ 1121.797964] FS-Cache: O-cookie c=00000000a9b93d5c [p=000000004f092a8c fl=222 nc=0 na=1] [ 1121.806388] FS-Cache: O-cookie d=00000000869bc68d n=00000000244c3ba5 [ 1121.813065] FS-Cache: O-key=[10] '0200020000807f000008' [ 1121.819012] FS-Cache: N-cookie c=000000001e27ad75 [p=000000004f092a8c fl=2 nc=0 na=1] [ 1121.827135] FS-Cache: N-cookie d=00000000869bc68d n=0000000006ac1beb [ 1121.833759] FS-Cache: N-key=[10] '0200020000807f000008' 02:21:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x700) 02:21:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) r3 = dup2(r0, r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x3, 0x10, {"12a600adf22640a27c0393449b6d1425"}, 0xc190, 0x0, 0x2000000000}}}, 0x90) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) mmap(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x4, 0x201e, r0, 0x4) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x3, 0xce85f1365cf29b91) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)={0x5, 0x0, [{0xa1d, 0x5, 0x0, 0x0, @sint={0x0, 0xffffffff}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x36cb, 0x0, 0x2, 0x80000001, 0x4}}, {0x81, 0x7, 0x0, 0x0, @adapter={0x4ab73777, 0xfffffffffffffffe, 0x6, 0x4629, 0xef}}, {0x8, 0x0, 0x0, 0x0, @adapter={0x800, 0x59d, 0x9, 0x98, 0x9}}, {0x1, 0x1, 0x0, 0x0, @sint={0x1, 0x6}}]}) 02:21:33 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000300)={r1, 0x5, &(0x7f0000000200)=[0x81, 0x7, 0x1a, 0x200, 0x7fffffff], &(0x7f0000000240)=[0x3f, 0x9, 0x3, 0x81, 0x1], 0x20, 0x2, 0xfffffffffffffff7, &(0x7f0000000280)=[0x9, 0x9], &(0x7f00000002c0)=[0x5, 0xfffffffffffffffd]}) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800000004, 0x2012, r2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x111, 0x1009}}, 0x20) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x900, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000080)={0x2, 0x5}) 02:21:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000) [ 1122.179225] *** Guest State *** [ 1122.193624] CR0: actual=0x0000000080000039, shadow=0x00000000e0000019, gh_mask=fffffffffffffff7 [ 1122.202488] CR4: actual=0x0000000000002070, shadow=0x0000000000000030, gh_mask=ffffffffffffe871 [ 1122.244110] CR3 = 0x0000000000004000 [ 1122.248264] PDPTR0 = 0x00000000000000e7 PDPTR1 = 0x0000000000000000 [ 1122.259273] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1122.272001] binder_alloc: binder_alloc_mmap_handler: 14930 20ffd000-21000000 already mapped failed -16 [ 1122.282366] RSP = 0x0000000000000f6e RIP = 0x000000000000912c [ 1122.289122] RFLAGS=0x00000006 DR7 = 0x0000000000000400 [ 1122.295698] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 [ 1122.302714] CS: sel=0x0010, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 1122.311384] DS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1122.344567] SS: sel=0x0038, attr=0x04093, limit=0x0000ffff, base=0x0000000000000000 [ 1122.390034] ES: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1122.420984] FS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1122.468397] GS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1122.490676] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 1122.507287] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 1122.525343] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 1122.537990] TR: sel=0x00d0, attr=0x0008b, limit=0x000001ff, base=0x0000000000004e00 [ 1122.549849] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 1122.560303] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1122.571693] Interruptibility = 00000000 ActivityState = 00000000 [ 1122.581794] *** Host State *** [ 1122.585484] RIP = 0xffffffff811f97e0 RSP = 0xffff88809795f670 [ 1122.591648] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1122.598507] FSBase=00007f7cd4081700 GSBase=ffff8880ae600000 TRBase=fffffe0000003000 [ 1122.606805] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1122.612852] CR0=0000000080050033 CR3=00000000a003a000 CR4=00000000001426f0 02:21:34 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:34 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) write(r4, &(0x7f0000000480), 0x7536aeb8) splice(r0, &(0x7f0000000180), r2, &(0x7f00000001c0), 0x401, 0xd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:21:34 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0xffffffff, 0x2000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x0, r1}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x111682, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r3, 0x0) 02:21:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) 02:21:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fe) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000200)=0x68) unshare(0x2000400) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup3(r4, r3, 0x0) finit_module(r3, &(0x7f0000000140)='\x00', 0x1) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040), 0x4) [ 1122.620355] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff88001360 [ 1122.627513] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1122.634642] *** Control State *** [ 1122.638291] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 1122.646410] EntryControls=0000d1ff ExitControls=002fefff [ 1122.652074] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1122.659453] VMEntry: intr_info=00000306 errcode=00000000 ilen=00000000 [ 1122.703164] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1122.712667] binder_alloc: binder_alloc_mmap_handler: 14944 20ffd000-21000000 already mapped failed -16 [ 1122.723730] reason=80000021 qualification=0000000000000002 [ 1122.730062] IDTVectoring: info=00000000 errcode=00000000 02:21:34 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1122.771428] TSC Offset = 0xfffffda4cc0f0a0b 02:21:34 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) [ 1122.820587] EPT pointer = 0x000000008ccf401e 02:21:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x20000) [ 1122.893022] FS-Cache: Duplicate cookie detected [ 1122.898999] FS-Cache: O-cookie c=000000007e26279a [p=000000004f092a8c fl=222 nc=0 na=1] [ 1122.907305] FS-Cache: O-cookie d=00000000869bc68d n=000000003614eb57 [ 1122.913958] FS-Cache: O-key=[10] '0200020000807f000008' [ 1122.919748] FS-Cache: N-cookie c=0000000051c495ba [p=000000004f092a8c fl=2 nc=0 na=1] [ 1122.927953] FS-Cache: N-cookie d=00000000869bc68d n=00000000ad66bba2 [ 1122.934639] FS-Cache: N-key=[10] '0200020000807f000008' 02:21:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x5, 0x9, 0x2, 0xffff, 0x0, 0x9, 0x602c0, 0xb, 0x4, 0x3f, 0x0, 0x7, 0x9af, 0x224fb2b8, 0x0, 0x8, 0x5, 0x8, 0x0, 0x10001, 0x81, 0x4, 0x10001, 0x20, 0x7, 0x0, 0x6ad1, 0x81, 0x1000, 0x40, 0x401, 0xf1, 0x2, 0x7f, 0x2c76, 0x100000001, 0x0, 0xf95, 0x7, @perf_bp={&(0x7f0000000140), 0x2}, 0x2, 0x5, 0x1, 0x1, 0x1, 0x6, 0x7}, r0, 0x7, 0xffffffffffffff9c, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x50, &(0x7f0000000280)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r1, r2, 0x0, 0x1, &(0x7f0000000200)='\x00', r3}, 0x30) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x5, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000080)=0x15, 0x4) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) fcntl$addseals(r5, 0x409, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f00000000c0)={0x6}) 02:21:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x100000000000000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:21:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2000000002012, r0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x400200, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x4000) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x1, 0x4) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000080)={0x4, 0xdd25, 0x8, 0x1, 0x2, 0x6}) 02:21:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x50000) 02:21:35 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:35 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) write(r4, &(0x7f0000000480), 0x7536aeb8) splice(r0, &(0x7f0000000180), r2, &(0x7f00000001c0), 0x401, 0xd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:21:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f00000003c0)=[0x2], 0x2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000380)={0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}]}) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000400)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 02:21:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x40000000) 02:21:35 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:35 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) write(r4, &(0x7f0000000480), 0x7536aeb8) splice(r0, &(0x7f0000000180), r2, &(0x7f00000001c0), 0x401, 0xd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1123.605336] FS-Cache: Duplicate cookie detected [ 1123.610271] FS-Cache: O-cookie c=00000000aaabd6d3 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1123.619074] FS-Cache: O-cookie d=00000000869bc68d n=00000000a96916ae [ 1123.625981] FS-Cache: O-key=[10] '0200020000807f000008' [ 1123.632010] FS-Cache: N-cookie c=000000002d2c3b64 [p=000000004f092a8c fl=2 nc=0 na=1] [ 1123.640281] FS-Cache: N-cookie d=00000000869bc68d n=000000002b0a28c1 [ 1123.646933] FS-Cache: N-key=[10] '0200020000807f000008' 02:21:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0xff000000) 02:21:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200000000000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:35 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x8f', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x6) [ 1124.064491] *** Guest State *** [ 1124.068038] CR0: actual=0x0000000080000039, shadow=0x00000000e0000019, gh_mask=fffffffffffffff7 [ 1124.085564] CR4: actual=0x0000000000002070, shadow=0x0000000000000030, gh_mask=ffffffffffffe871 [ 1124.101232] CR3 = 0x0000000000004000 [ 1124.132038] PDPTR0 = 0x00000000000000e7 PDPTR1 = 0x0000000000000000 02:21:36 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1124.182590] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1124.216593] RSP = 0x0000000000000f6e RIP = 0x000000000000912c 02:21:36 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1124.260772] RFLAGS=0x00000006 DR7 = 0x0000000000000400 [ 1124.301798] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 [ 1124.345530] CS: sel=0x0010, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 1124.396643] FS-Cache: Duplicate cookie detected [ 1124.401704] FS-Cache: O-cookie c=0000000057508121 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1124.411816] FS-Cache: O-cookie d=00000000869bc68d n=0000000019c9ed51 [ 1124.418511] FS-Cache: O-key=[10] '0200020000807f000008' [ 1124.421372] DS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1124.424501] FS-Cache: N-cookie c=00000000d0ec45a3 [p=000000004f092a8c fl=2 nc=0 na=1] [ 1124.440684] FS-Cache: N-cookie d=00000000869bc68d n=00000000dfdc7ca3 [ 1124.445960] SS: sel=0x0038, attr=0x04093, limit=0x0000ffff, base=0x0000000000000000 [ 1124.447313] FS-Cache: N-key=[10] '0200020000807f000008' [ 1124.462431] ES: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 02:21:36 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) write(r4, &(0x7f0000000480), 0x7536aeb8) splice(r0, &(0x7f0000000180), r2, &(0x7f00000001c0), 0x401, 0xd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:21:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000) [ 1124.492369] FS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1124.507988] GS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1124.518648] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 1124.569719] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 1124.600711] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 1124.623326] TR: sel=0x00d0, attr=0x0008b, limit=0x000001ff, base=0x0000000000004e00 [ 1124.633738] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 1124.648333] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 02:21:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x500000000000000) [ 1124.673278] Interruptibility = 00000000 ActivityState = 00000000 [ 1124.679806] *** Host State *** [ 1124.683174] RIP = 0xffffffff811f97e0 RSP = 0xffff88808da9f670 [ 1124.717280] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 02:21:36 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x8f', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1124.758846] FSBase=00007f7cd4081700 GSBase=ffff8880ae700000 TRBase=fffffe0000003000 [ 1124.793851] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1124.828133] CR0=0000000080050033 CR3=00000000a7b81000 CR4=00000000001426e0 [ 1124.857006] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff88001360 02:21:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x600000000000000) 02:21:36 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000000c0)) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000280)) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x3, 0x2) write$binfmt_misc(r0, &(0x7f0000000440)={'syz1'}, 0x1200e) [ 1124.970559] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1124.985062] *** Control State *** [ 1124.988763] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca 02:21:36 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1125.014348] EntryControls=0000d1ff ExitControls=002fefff [ 1125.039006] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1125.052621] VMEntry: intr_info=00000306 errcode=00000000 ilen=00000000 [ 1125.071195] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1125.094852] reason=80000021 qualification=0000000000000002 [ 1125.111346] IDTVectoring: info=00000000 errcode=00000000 [ 1125.133848] TSC Offset = 0xfffffda3cade57fe [ 1125.145522] EPT pointer = 0x000000009a90201e 02:21:37 executing program 2: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{}, 0x4, 0x4}], 0x18) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x6, 0x4) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8000000, 0xfffffffffffffff9, 0xffffffffffffa43a, 0x100, 0x1ff}, &(0x7f0000000340)=0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000380)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000400)={r2, 0x7, 0x7, 0x1f, 0x0, 0xa0, 0x9, 0x0, {r3, @in={{0x2, 0x4e21, @multicast2}}, 0x7, 0x2, 0x7, 0x7, 0x5}}, &(0x7f00000004c0)=0xb0) accept4(r1, &(0x7f0000000500)=@can, &(0x7f0000000580)=0x80, 0x80800) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r4 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x2000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="50a327bd7000fedbdf25130000000800020004000400"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24000004) 02:21:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0xffffffff00000000) 02:21:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:37 executing program 0: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) clone(0x202102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x80001, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200040, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x180000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xfc, r3, 0x314, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3b}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20aa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x468}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffffffffffd}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x16}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x13}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb1}]}, 0xfc}}, 0x40000) 02:21:37 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x1, 0x2000, 0x7c000000, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r3 = shmget(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x200001, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) r5 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000300)) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000200)={'bridge_slave_0\x00'}) getsockname(r5, &(0x7f00000004c0)=@ipx, &(0x7f0000000380)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000002000)={@local, 0x7e, r7}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r8 = dup2(r2, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f00000003c0)) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r9, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) r10 = semget$private(0x0, 0x7, 0x400) semtimedop(r10, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) semop(r10, &(0x7f0000000040)=[{0x0, 0x7fffffff}, {}], 0x2) semctl$SETALL(r10, 0x0, 0x11, &(0x7f0000000080)=[0x1]) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f0000000580)=ANY=[@ANYBLOB="0800007d281dfd9dee27cd0dff6eeaaf102ca035664cc53435a74adbd22e6413107d17204e62c2911f5ea8efc5699326e02b66b9523b85c5bbc7330062a31704008f5efba52ee00351efb3336b5c0a1b111a2aea05000000437eda4900013e63d23a89cdbc1a7e34d12656699601a7e0368e2b66f25e9e079b4e2463b7db5ca0f7a0a37501000034f4e6880693ee3686d00c0000006250b91a7b312dd0efd662c65b978cfd7d6a1ba7f38400000000000067ae735b1460732bd145277ca7d36dceea02cc882ae34b6f47e36cf5bb7325babc51d92f7906ca7e4f526c0ac1b706a53dcb0100f57cbbc2856af788056980a57068fe452d0364c78bd53fa3a7bb3e6135efe8156fed0a239d8abdb49ab2fbfe84b96747f45d3f1d2d6ece819afdf8447c196de6148042373c7536eb5826288100ae52476364df95bed491a48d66c4ffad0cd44138d4406dc73d4db9384cc0c8df6fdc00000000000000000000000000000000aa0c5c098045a987649f2a3a5e413a87c41bf92b9a95c3bf3495fc7e312923dd0dac5672a23c84f92abe67b987b7a52e1d9a742edbb200000000000000000000000000000000f6db93be90ee6ca6520924a137c019064415ccfe6be5fd66e5edd78dbb9c225de2bcbb6f1805b624e1e70f9a6222cdf660a823a6ce24a3f830edf72bb2b0d0e2c56e5c4c7f2fd25473c7a439ac6db8e954d37253697f2f847a24f6979473f9b9b394ac7239b6e821b448f24832384c66b0527f80510f0d89555fc331b09cc6682168e0e822614d931aeea0393b52e9cada78acf7857057cb6ad30699f250f3fba6ca9a6304a8dde20869cb2917f5b1df4a1240748a5cf01a08d54fcd97bb5433620562f2c07f73d0373078b9e5be6f5a30a94ee70115fc61558370d2e9b568bd7c7768f14cc9f0b14556984d2e7a2430e72fb456f705144b8fa7aa8e83519e9a524fb5ed52a536568447a55ff3d4ede5b3b7dfae467bf09b83706972ccb1cc097e169a173d0dab0575541db434a63fbb72bf04a2cc8b0b678a22f0f9824af47a3cac8038d97f9b6e573e1d378ea53880df9f29c6747c3bffd7fef7ab64876905633aabf7a4eff46cdaec414c60b538081cff162e8a491ae66448d9928adcbf78663b910051e02c3060a0c011629c562da2983b9d40a82dbb5d28a0a26d5730793ee138ee4501bb1452d6d6dfc1567ddcece239e7c993cc256d10726145a91ef59b8502e56a3c9c5dd192d08a765a28a2773d80b097"]) accept4$unix(r9, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) 02:21:37 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) write(r3, &(0x7f0000000480), 0x7536aeb8) splice(r0, &(0x7f0000000180), r2, &(0x7f00000001c0), 0x401, 0xd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) [ 1125.402662] *** Guest State *** [ 1125.411049] CR0: actual=0x0000000080000039, shadow=0x00000000e0000019, gh_mask=fffffffffffffff7 02:21:37 executing program 2: r0 = socket(0x1e, 0x5, 0x0) listen(r0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x100000001, 0x80) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000080)={0x3}) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) tkill(r1, 0x15) [ 1125.463764] CR4: actual=0x0000000000002070, shadow=0x0000000000000030, gh_mask=ffffffffffffe871 [ 1125.472630] CR3 = 0x0000000000004000 [ 1125.472647] PDPTR0 = 0x00000000000000e7 PDPTR1 = 0x0000000000000000 [ 1125.472661] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1125.472671] RSP = 0x0000000000000f6e RIP = 0x000000000000912c [ 1125.472683] RFLAGS=0x00000006 DR7 = 0x0000000000000400 [ 1125.472700] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 02:21:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff) 02:21:37 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0xf00) [ 1125.786779] CS: sel=0x0010, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 1125.796148] DS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1125.806560] SS: sel=0x0038, attr=0x04093, limit=0x0000ffff, base=0x0000000000000000 [ 1125.817029] ES: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1125.863822] FS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1125.875560] GS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1125.895488] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 1125.910147] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 1125.918795] IDTR: limit=0x000001ff, base=0x0000000000003800 02:21:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x60) [ 1125.954314] TR: sel=0x00d0, attr=0x0008b, limit=0x000001ff, base=0x0000000000004e00 [ 1125.962336] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 1125.983049] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1125.992819] Interruptibility = 00000000 ActivityState = 00000000 [ 1126.001616] *** Host State *** [ 1126.005082] RIP = 0xffffffff811f97e0 RSP = 0xffff88804ee8f670 [ 1126.011172] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1126.021117] FSBase=00007f7cd4081700 GSBase=ffff8880ae700000 TRBase=fffffe0000003000 02:21:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x600) [ 1126.061874] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1126.095789] CR0=0000000080050033 CR3=0000000097bac000 CR4=00000000001426e0 [ 1126.141391] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff88001360 [ 1126.150473] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1126.163610] *** Control State *** [ 1126.194449] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 1126.202907] EntryControls=0000d1ff ExitControls=002fefff [ 1126.209876] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1126.217799] VMEntry: intr_info=00000306 errcode=00000000 ilen=00000000 [ 1126.225214] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1126.232277] reason=80000021 qualification=0000000000000002 [ 1126.239474] IDTVectoring: info=00000000 errcode=00000000 02:21:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x80000000000) [ 1126.245549] TSC Offset = 0xfffffda31358d8f7 [ 1126.250216] EPT pointer = 0x0000000050ef201e 02:21:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) fadvise64(r0, 0x0, 0x8, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000100)="260f01cab9800000c00f3235010000000f300f350f01c865674683070cc7442400a8149826c7442402eb897f7ec7442406000000000f011c24c4234d48e506430f011f66460f381eb700000080b805000000b9390000000f01d9"}], 0xaaaaaaaaaaaab5e, 0x13, 0x0, 0xfffffffffffffdfc) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x0, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x200, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8}, {0xa, 0x4e22, 0xa55, @empty, 0x5}, r6, 0x7}}, 0x48) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000180)={r5, r2, 0xfffffffffffffffc}) ioctl$TCGETA(r5, 0x5405, &(0x7f00000001c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x2, 0x0) 02:21:38 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) write(r3, &(0x7f0000000480), 0x7536aeb8) splice(r0, &(0x7f0000000180), r2, &(0x7f00000001c0), 0x401, 0xd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:21:38 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:38 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x1, 0x2000, 0x7c000000, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r3 = shmget(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x200001, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) r5 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000300)) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000200)={'bridge_slave_0\x00'}) getsockname(r5, &(0x7f00000004c0)=@ipx, &(0x7f0000000380)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000002000)={@local, 0x7e, r7}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r8 = dup2(r2, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f00000003c0)) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r9, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) r10 = semget$private(0x0, 0x7, 0x400) semtimedop(r10, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) semop(r10, &(0x7f0000000040)=[{0x0, 0x7fffffff}, {}], 0x2) semctl$SETALL(r10, 0x0, 0x11, &(0x7f0000000080)=[0x1]) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) accept4$unix(r9, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) 02:21:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000000000) 02:21:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000001c0)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\x03\x00\x00\x00\xef\x00\x00\x03\xff\x02\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x06\x00', 0xc7, 0x80003}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000100)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2000000080003, 0x0) close(r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 02:21:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) flock(r0, 0x8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="79b480a468fe9bd5e9e166baf80cb824aff386ef66bafc0c66b843cf66ef66260f0135dac67207660f38802336260fda270f01ca0f060f01f3660fae7b00", 0x3e}], 0x1, 0x2, &(0x7f00000000c0)=[@dstype0={0x6, 0x7}], 0x1) 02:21:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x6000000000000000) [ 1126.867441] *** Guest State *** [ 1126.871420] CR0: actual=0x0000000080000039, shadow=0x00000000e0000019, gh_mask=fffffffffffffff7 [ 1126.897902] CR4: actual=0x0000000000002070, shadow=0x0000000000000030, gh_mask=ffffffffffffe871 [ 1126.920003] CR3 = 0x0000000000004000 02:21:38 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x1, 0x2000, 0x7c000000, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r3 = shmget(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x200001, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) r5 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000300)) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000200)={'bridge_slave_0\x00'}) getsockname(r5, &(0x7f00000004c0)=@ipx, &(0x7f0000000380)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000002000)={@local, 0x7e, r7}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r8 = dup2(r2, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f00000003c0)) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r9, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) r10 = semget$private(0x0, 0x7, 0x400) semtimedop(r10, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) semop(r10, &(0x7f0000000040)=[{0x0, 0x7fffffff}, {}], 0x2) semctl$SETALL(r10, 0x0, 0x11, &(0x7f0000000080)=[0x1]) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) accept4$unix(r9, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) [ 1126.941364] PDPTR0 = 0x00000000000000e7 PDPTR1 = 0x0000000000000000 [ 1126.954585] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1126.961514] RSP = 0x0000000000000f6e RIP = 0x000000000000912c [ 1127.001606] RFLAGS=0x00000006 DR7 = 0x0000000000000400 [ 1127.035497] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 02:21:38 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\xff', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1127.072575] CS: sel=0x0010, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 1127.100209] DS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 02:21:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x8) [ 1127.122805] SS: sel=0x0038, attr=0x04093, limit=0x0000ffff, base=0x0000000000000000 [ 1127.138809] ES: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1127.173654] FS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1127.197614] GS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1127.221274] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 1127.250612] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 1127.264228] IDTR: limit=0x000001ff, base=0x0000000000003800 02:21:39 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1127.281709] TR: sel=0x00d0, attr=0x0008b, limit=0x000001ff, base=0x0000000000004e00 [ 1127.291115] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 1127.304140] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1127.311743] Interruptibility = 00000000 ActivityState = 00000000 [ 1127.354252] *** Host State *** [ 1127.359317] RIP = 0xffffffff811f97e0 RSP = 0xffff88805a6cf670 [ 1127.382451] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1127.389102] FSBase=00007f7cd4081700 GSBase=ffff8880ae600000 TRBase=fffffe0000003000 02:21:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000000) 02:21:39 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) write(r3, &(0x7f0000000480), 0x7536aeb8) splice(r0, &(0x7f0000000180), r2, &(0x7f00000001c0), 0x401, 0xd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) [ 1127.403309] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1127.410070] CR0=0000000080050033 CR3=000000008d1e3000 CR4=00000000001426f0 [ 1127.443804] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff88001360 [ 1127.480821] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1127.513937] *** Control State *** [ 1127.517871] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 1127.526462] EntryControls=0000d1ff ExitControls=002fefff [ 1127.532496] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1127.540391] VMEntry: intr_info=00000306 errcode=00000000 ilen=00000000 [ 1127.547974] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1127.560710] reason=80000021 qualification=0000000000000002 [ 1127.569531] IDTVectoring: info=00000000 errcode=00000000 [ 1127.607504] TSC Offset = 0xfffffda247ed0b93 [ 1127.612224] EPT pointer = 0x000000008fa8d01e 02:21:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x800000000000000) 02:21:39 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@nl=@proc, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x8a85, 0x10}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r2, 0x5, 0x7, [0x7fff, 0x19, 0x4, 0x9, 0xffffffffffffffc0, 0xff, 0x2]}, 0x16) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1127.773095] FS-Cache: Duplicate cookie detected [ 1127.778689] FS-Cache: O-cookie c=00000000d3608a89 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1127.787074] FS-Cache: O-cookie d=00000000869bc68d n=00000000a593a95f [ 1127.793739] FS-Cache: O-key=[10] '0200020000807f000008' [ 1127.799288] FS-Cache: N-cookie c=000000004a9b8f54 [p=000000004f092a8c fl=2 nc=0 na=1] [ 1127.807664] FS-Cache: N-cookie d=00000000869bc68d n=00000000e55d71c8 [ 1127.814338] FS-Cache: N-key=[10] '0200020000807f000008' 02:21:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x3f00000000000000) 02:21:39 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\xe8', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1127.934126] *** Guest State *** [ 1127.945554] CR0: actual=0x0000000080000039, shadow=0x00000000e0000019, gh_mask=fffffffffffffff7 [ 1127.969158] CR4: actual=0x0000000000002070, shadow=0x0000000000000030, gh_mask=ffffffffffffe871 [ 1127.978581] CR3 = 0x0000000000004000 02:21:39 executing program 2: socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/sys/net/ipv4/vs/lblc_expiration\x00\x9b(4\x93\x8dK\xda57\x8f\x9b\x9d\x1d\xe1\x82\xcd\x81\xdc\xba{\xdd\r \x8f@Pj\xa7 \x18\x04f\xaa,\x92\x8f\x1d^(\x998/s\xe2\x02]<\\\xb2', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000200)={0x1, &(0x7f0000000440)=[{}]}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x8001, 0x800000}, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x80807, 0xfffffffffffffffd, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GP\x1a\x00\xf9\xd3\xc4q\xb4\xa5C\v\x11i\x1d\x81\xfbK\x9cI\x10j\xb3\xa0\x1e\xaan\x14\x94\xe1\x01\x12\xf6\xe5\'\xa7F\x96\x1b-\xa6a\xbc\x05\x17\xd1\xfe\xd1$\xf6\xef\xb4)-\xc4\xc6\xdfR\xa2\xc0b<\xdc\x1a\x18v}\x96\x1c&\xd3\xaa\x8cc:#Ig\xdf\xe0G\xb1Y\x97\xef\xc5\xa3\xbbR,\xb098F\xdc\xc3\xf6\xe7j(\x865i|d+<\xc7\xb3\xb3k=\x13T\xddP\x87\x12\xa1\xf1^;T-\x8a\f\f\x9as\xd1\x9d\x95+\xce\xf7\xd7\xd5\xcbp;D\xc4\xf1~_v\xe7\xa2\xf9\xc4N\ao\xb1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a58c67b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c9f5a537a66377bbc", 0x43}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f00000006c0)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000380)={'bond_slave_1\x00', 0x400}) gettid() clone(0x2902001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') exit(0x0) memfd_create(&(0x7f0000000340)='\x00', 0x4) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000002c0)={0x30}, 0xfffffcfc) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000300)=[0x7f, 0x9]) [ 1127.982500] PDPTR0 = 0x00000000000000e7 PDPTR1 = 0x0000000000000000 [ 1128.048769] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1128.083854] RSP = 0x0000000000000f6e RIP = 0x000000000000912c 02:21:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0xf000000) 02:21:39 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x9e', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1128.103785] RFLAGS=0x00000006 DR7 = 0x0000000000000400 [ 1128.125959] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 [ 1128.173738] CS: sel=0x0010, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 1128.196532] DS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1128.250437] SS: sel=0x0038, attr=0x04093, limit=0x0000ffff, base=0x0000000000000000 02:21:40 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) write(r4, &(0x7f0000000480), 0x7536aeb8) splice(r0, &(0x7f0000000180), r2, &(0x7f00000001c0), 0x401, 0xd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1128.291598] ES: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 02:21:40 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x48880, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/sockcreate\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) [ 1128.363689] FS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 02:21:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x6000) 02:21:40 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1128.430611] GS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1128.512012] GDTR: limit=0x000007ff, base=0x0000000000001000 02:21:40 executing program 0: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='net/ip6_tables_matches\x00') preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1, 0x0) [ 1128.587422] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 1128.610590] IDTR: limit=0x000001ff, base=0x0000000000003800 02:21:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x7) [ 1128.684593] TR: sel=0x00d0, attr=0x0008b, limit=0x000001ff, base=0x0000000000004e00 [ 1128.719773] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 1128.748492] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1128.779750] Interruptibility = 00000000 ActivityState = 00000000 [ 1128.797442] *** Host State *** [ 1128.807644] RIP = 0xffffffff811f97e0 RSP = 0xffff88805a6cf670 [ 1128.846140] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1128.891937] FSBase=00007f7cd4060700 GSBase=ffff8880ae600000 TRBase=fffffe0000033000 [ 1128.926833] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1128.946824] CR0=0000000080050033 CR3=000000005bb2b000 CR4=00000000001426f0 [ 1128.974242] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff88001360 [ 1128.981059] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1129.021493] *** Control State *** [ 1129.047612] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 1129.093750] EntryControls=0000d1ff ExitControls=002fefff [ 1129.099259] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1129.127964] VMEntry: intr_info=00000306 errcode=00000000 ilen=00000000 [ 1129.148648] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1129.167857] reason=80000021 qualification=0000000000000002 [ 1129.186810] IDTVectoring: info=00000000 errcode=00000000 [ 1129.202718] TSC Offset = 0xfffffda1b8c58beb [ 1129.215112] EPT pointer = 0x0000000086c4701e 02:21:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x2, 0x4, 0x1, 0x3, 0x7fff, 0xaf, 0x7, 0x3, 0x6, 0x7, 0x8, 0x3, 0x800000000, 0x6, 0x11}}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read(r0, &(0x7f0000000180)=""/230, 0x367) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$eventfd(r0, 0x0, 0x0) 02:21:41 executing program 2: socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/sys/net/ipv4/vs/lblc_expiration\x00\x9b(4\x93\x8dK\xda57\x8f\x9b\x9d\x1d\xe1\x82\xcd\x81\xdc\xba{\xdd\r \x8f@Pj\xa7 \x18\x04f\xaa,\x92\x8f\x1d^(\x998/s\xe2\x02]<\\\xb2', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000200)={0x1, &(0x7f0000000440)=[{}]}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x8001, 0x800000}, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x80807, 0xfffffffffffffffd, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GP\x1a\x00\xf9\xd3\xc4q\xb4\xa5C\v\x11i\x1d\x81\xfbK\x9cI\x10j\xb3\xa0\x1e\xaan\x14\x94\xe1\x01\x12\xf6\xe5\'\xa7F\x96\x1b-\xa6a\xbc\x05\x17\xd1\xfe\xd1$\xf6\xef\xb4)-\xc4\xc6\xdfR\xa2\xc0b<\xdc\x1a\x18v}\x96\x1c&\xd3\xaa\x8cc:#Ig\xdf\xe0G\xb1Y\x97\xef\xc5\xa3\xbbR,\xb098F\xdc\xc3\xf6\xe7j(\x865i|d+<\xc7\xb3\xb3k=\x13T\xddP\x87\x12\xa1\xf1^;T-\x8a\f\f\x9as\xd1\x9d\x95+\xce\xf7\xd7\xd5\xcbp;D\xc4\xf1~_v\xe7\xa2\xf9\xc4N\ao\xb1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a58c67b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c9f5a537a66377bbc", 0x43}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f00000006c0)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000380)={'bond_slave_1\x00', 0x400}) gettid() clone(0x2902001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') exit(0x0) memfd_create(&(0x7f0000000340)='\x00', 0x4) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000002c0)={0x30}, 0xfffffcfc) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000300)=[0x7f, 0x9]) 02:21:41 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:41 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) write(r4, &(0x7f0000000480), 0x7536aeb8) splice(r0, &(0x7f0000000180), r2, &(0x7f00000001c0), 0x401, 0xd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:21:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x40000) 02:21:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x833, 0x0, @dev, @remote, {[@rr={0xffffff86, 0x3}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000000)={0x0, 0x3, [0x0, 0x2000000000000057]}) 02:21:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x7f3885c52700) 02:21:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x2a) 02:21:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f00000004c0)=[{}], 0x1, 0x200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) close(r2) shutdown(r1, 0x0) 02:21:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) r2 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) socketpair$unix(0x1, 0x11000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) io_getevents(r1, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x2050, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x400000000000}]) 02:21:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x3) [ 1129.852764] *** Guest State *** [ 1129.864266] CR0: actual=0x0000000080000039, shadow=0x00000000e0000019, gh_mask=fffffffffffffff7 02:21:41 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1129.917055] CR4: actual=0x0000000000002070, shadow=0x0000000000000030, gh_mask=ffffffffffffe871 [ 1129.987490] CR3 = 0x0000000000004000 [ 1130.004098] PDPTR0 = 0x00000000000000e7 PDPTR1 = 0x0000000000000000 [ 1130.039516] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1130.067597] RSP = 0x0000000000000f6e RIP = 0x000000000000912c 02:21:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) r2 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) socketpair$unix(0x1, 0x11000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) io_getevents(r1, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x2050, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x400000000000}]) 02:21:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x400d030000000000) 02:21:41 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) write(r4, &(0x7f0000000480), 0x7536aeb8) splice(r0, &(0x7f0000000180), r2, &(0x7f00000001c0), 0x401, 0xd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1130.092759] RFLAGS=0x00000006 DR7 = 0x0000000000000400 [ 1130.106615] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 [ 1130.122802] CS: sel=0x0010, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 1130.171472] DS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1130.218645] SS: sel=0x0038, attr=0x04093, limit=0x0000ffff, base=0x0000000000000000 [ 1130.251955] ES: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 02:21:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)) msgsnd(r1, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x1, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) [ 1130.279592] FS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1130.326176] GS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1130.343689] GDTR: limit=0x000007ff, base=0x0000000000001000 02:21:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) r2 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) socketpair$unix(0x1, 0x11000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) io_getevents(r1, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x2050, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x400000000000}]) [ 1130.381718] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 02:21:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0xc00) [ 1130.431597] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 1130.480456] TR: sel=0x00d0, attr=0x0008b, limit=0x000001ff, base=0x0000000000004e00 [ 1130.534699] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 1130.567197] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1130.612343] Interruptibility = 00000000 ActivityState = 00000000 [ 1130.644365] *** Host State *** 02:21:42 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1130.661651] RIP = 0xffffffff811f97e0 RSP = 0xffff8880866f7670 [ 1130.720031] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1130.750640] FSBase=00007f7cd4060700 GSBase=ffff8880ae700000 TRBase=fffffe0000033000 [ 1130.776616] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1130.809421] CR0=0000000080050033 CR3=000000008d1e3000 CR4=00000000001426e0 [ 1130.835490] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff88001360 [ 1130.868963] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1130.876694] *** Control State *** [ 1130.880636] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 1130.893958] EntryControls=0000d1ff ExitControls=002fefff [ 1130.899737] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1130.915163] VMEntry: intr_info=00000306 errcode=00000000 ilen=00000000 [ 1130.922159] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1130.937173] reason=80000021 qualification=0000000000000002 [ 1130.949235] IDTVectoring: info=00000000 errcode=00000000 [ 1130.956628] TSC Offset = 0xfffffda0b6a8a37a [ 1130.961299] EPT pointer = 0x000000008db6401e 02:21:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0xfffffffffffffffa) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000080)={0x2, "a81c46659e1914c37a15c45b14f858ca7f1e7f7e4d637a0102893c3457d98805", 0x2, 0x1444, 0x3, 0x1, 0x5, 0x1, 0x7f, 0x5}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="090000000000000001000040020000000700000000a16c3103000000000000000f0000840500000001000000ff0100000200000000000000010000c0000000000900000000000000010000000000000000000000092a0000005e350000060000000600000000000000010000400400000004000000070000007a0e0000000000000f000040090000000100000005000000a51300000000000019000080ccfdffff20000000030000000100000000000000010000c0b030000006000000b44f00000700000000000000070000000000000006000000060000009e00000000000000"]) 02:21:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x11) 02:21:42 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x9) 02:21:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000ff5fe8)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000ff7fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mlock(&(0x7f0000012000/0x2000)=nil, 0x2000) mremap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00009de000/0x4000)=nil) 02:21:42 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) write(r4, &(0x7f0000000480), 0x7536aeb8) splice(r0, &(0x7f0000000180), r2, &(0x7f00000001c0), 0x401, 0xd) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:21:42 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r0, 0x0, &(0x7f00000000c0)) 02:21:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x30d40) [ 1131.274873] *** Guest State *** [ 1131.294484] CR0: actual=0x0000000080000039, shadow=0x00000000e0000019, gh_mask=fffffffffffffff7 02:21:43 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\xff', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1131.340254] CR4: actual=0x0000000000002070, shadow=0x0000000000000030, gh_mask=ffffffffffffe871 [ 1131.370265] CR3 = 0x0000000000004000 [ 1131.385878] PDPTR0 = 0x00000000000000e7 PDPTR1 = 0x0000000000000000 02:21:43 executing program 0: [ 1131.411278] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 02:21:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x9d17000000000000) [ 1131.464787] RSP = 0x0000000000000f6e RIP = 0x000000000000912c 02:21:43 executing program 0: [ 1131.519405] RFLAGS=0x00000006 DR7 = 0x0000000000000400 [ 1131.533972] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 02:21:43 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x97', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1131.572575] CS: sel=0x0010, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 1131.633897] DS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1131.666035] SS: sel=0x0038, attr=0x04093, limit=0x0000ffff, base=0x0000000000000000 [ 1131.692010] ES: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1131.738074] FS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1131.780200] GS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1131.803241] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 1131.815955] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 1131.827515] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 1131.840878] TR: sel=0x00d0, attr=0x0008b, limit=0x000001ff, base=0x0000000000004e00 [ 1131.857170] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 1131.867169] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1131.878014] Interruptibility = 00000000 ActivityState = 00000000 [ 1131.888507] *** Host State *** [ 1131.892465] RIP = 0xffffffff811f97e0 RSP = 0xffff8880509f7670 [ 1131.903017] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1131.912816] FSBase=00007f7cd4060700 GSBase=ffff8880ae700000 TRBase=fffffe0000003000 [ 1131.927522] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1131.942243] CR0=0000000080050033 CR3=000000008f952000 CR4=00000000001426e0 [ 1131.984992] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff88001360 [ 1132.008037] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1132.043626] *** Control State *** [ 1132.047906] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 1132.091261] EntryControls=0000d1ff ExitControls=002fefff [ 1132.117959] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1132.133805] VMEntry: intr_info=00000306 errcode=00000000 ilen=00000000 [ 1132.140589] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1132.156775] reason=80000021 qualification=0000000000000002 [ 1132.175865] IDTVectoring: info=00000000 errcode=00000000 [ 1132.181434] TSC Offset = 0xfffffd9ff5079bbc 02:21:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x3f000000) 02:21:44 executing program 0: 02:21:44 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:44 executing program 2: [ 1132.193677] EPT pointer = 0x000000005e79401e 02:21:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000040)={0x3, 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:44 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) write(r4, &(0x7f0000000480), 0x7536aeb8) splice(r0, &(0x7f0000000180), r2, &(0x7f00000001c0), 0x401, 0xd) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:21:44 executing program 0: 02:21:44 executing program 2: 02:21:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000080)=0x209282, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 02:21:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x20000000) 02:21:44 executing program 2: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x0) [ 1132.504572] *** Guest State *** 02:21:44 executing program 2: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x3}}, 0x1c) 02:21:44 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000940)={{}, {}, [{0x2, 0x4}, {0x2, 0x3}, {0x2, 0x4}, {}], {0x4, 0x4}, [{0x8, 0x4}, {0x8, 0x3}], {0x10, 0x5}, {0x20, 0x6}}, 0x54, 0x3) [ 1132.537413] CR0: actual=0x0000000080000039, shadow=0x00000000e0000019, gh_mask=fffffffffffffff7 [ 1132.602730] CR4: actual=0x0000000000002070, shadow=0x0000000000000030, gh_mask=ffffffffffffe871 [ 1132.654699] CR3 = 0x0000000000004000 [ 1132.658466] PDPTR0 = 0x00000000000000e7 PDPTR1 = 0x0000000000000000 02:21:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x5000000) [ 1132.706990] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1132.724069] RSP = 0x0000000000000f6e RIP = 0x000000000000912c [ 1132.735628] RFLAGS=0x00000006 DR7 = 0x0000000000000400 [ 1132.768766] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 [ 1132.779007] CS: sel=0x0010, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 1132.801536] DS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 02:21:44 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:44 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@loopback, @in=@local}}, {{@in=@remote}, 0x0, @in=@multicast1}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 1132.818780] SS: sel=0x0038, attr=0x04093, limit=0x0000ffff, base=0x0000000000000000 [ 1132.831678] ES: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1132.843315] FS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1132.855370] GS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1132.923773] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 1132.938312] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 1132.978635] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 1132.993801] TR: sel=0x00d0, attr=0x0008b, limit=0x000001ff, base=0x0000000000004e00 [ 1133.014108] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 1133.035168] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1133.043024] Interruptibility = 00000000 ActivityState = 00000000 [ 1133.063672] *** Host State *** [ 1133.067082] RIP = 0xffffffff811f97e0 RSP = 0xffff8880562e7670 [ 1133.073251] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1133.079977] FSBase=00007f7cd403f700 GSBase=ffff8880ae600000 TRBase=fffffe0000033000 [ 1133.088212] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1133.094354] CR0=0000000080050033 CR3=00000000a4c6e000 CR4=00000000001426f0 [ 1133.101589] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff88001360 [ 1133.108522] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1133.114857] *** Control State *** [ 1133.118512] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 1133.125430] EntryControls=0000d1ff ExitControls=002fefff [ 1133.131089] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1133.138385] VMEntry: intr_info=00000306 errcode=00000000 ilen=00000000 [ 1133.148715] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1133.155383] reason=80000021 qualification=0000000000000002 [ 1133.161710] IDTVectoring: info=00000000 errcode=00000000 [ 1133.167233] TSC Offset = 0xfffffd9f53044a16 [ 1133.171565] EPT pointer = 0x0000000086c4701e 02:21:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) unshare(0x200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x2000) 02:21:45 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) write(r4, &(0x7f0000000480), 0x7536aeb8) splice(r0, &(0x7f0000000180), r2, &(0x7f00000001c0), 0x401, 0xd) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:21:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0xffff8000) [ 1133.453912] *** Guest State *** [ 1133.473745] CR0: actual=0x0000000080000039, shadow=0x00000000e0000019, gh_mask=fffffffffffffff7 [ 1133.491982] CR4: actual=0x0000000000002070, shadow=0x0000000000000030, gh_mask=ffffffffffffe871 02:21:45 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1133.511908] CR3 = 0x0000000000004000 [ 1133.531253] PDPTR0 = 0x00000000000000e7 PDPTR1 = 0x0000000000000000 02:21:45 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1133.568960] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1133.603718] RSP = 0x0000000000000f6e RIP = 0x000000000000912c 02:21:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x2000000000000000) [ 1133.661058] RFLAGS=0x00000006 DR7 = 0x0000000000000400 [ 1133.718319] FS-Cache: Duplicate cookie detected [ 1133.723341] FS-Cache: O-cookie c=0000000072bd290e [p=000000004f092a8c fl=222 nc=0 na=1] [ 1133.726985] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 [ 1133.734054] FS-Cache: O-cookie d=00000000869bc68d n=00000000acb2137c [ 1133.745018] FS-Cache: O-key=[10] '0200020000807f000008' [ 1133.750845] FS-Cache: N-cookie c=000000009c2dc58c [p=000000004f092a8c fl=2 nc=0 na=1] [ 1133.759008] FS-Cache: N-cookie d=00000000869bc68d n=000000008019c81b 02:21:45 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1133.765687] FS-Cache: N-key=[10] '0200020000807f000008' [ 1133.776488] CS: sel=0x0010, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 1133.897027] DS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1133.944423] SS: sel=0x0038, attr=0x04093, limit=0x0000ffff, base=0x0000000000000000 [ 1133.955794] FS-Cache: Duplicate cookie detected [ 1133.960737] FS-Cache: O-cookie c=0000000072bd290e [p=000000004f092a8c fl=222 nc=0 na=1] [ 1133.970063] FS-Cache: O-cookie d=00000000869bc68d n=00000000acb2137c [ 1133.976747] FS-Cache: O-key=[10] '0200020000807f000008' [ 1133.982677] FS-Cache: N-cookie c=0000000038f28dd5 [p=000000004f092a8c fl=2 nc=0 na=1] 02:21:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x2000000000000) [ 1133.990820] FS-Cache: N-cookie d=00000000869bc68d n=00000000bb02fb59 [ 1133.997638] FS-Cache: N-key=[10] '0200020000807f000008' [ 1134.004157] ES: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1134.026243] FS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1134.055884] GS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1134.069534] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 1134.083849] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 1134.113356] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 1134.145270] TR: sel=0x00d0, attr=0x0008b, limit=0x000001ff, base=0x0000000000004e00 02:21:45 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) write(r2, &(0x7f0000000480), 0x7536aeb8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1134.200979] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 1134.213821] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 02:21:46 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\xff', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) [ 1134.275161] Interruptibility = 00000000 ActivityState = 00000000 [ 1134.311825] *** Host State *** [ 1134.360272] RIP = 0xffffffff811f97e0 RSP = 0xffff88804de8f670 [ 1134.390902] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1134.424649] FSBase=00007f7cd4060700 GSBase=ffff8880ae700000 TRBase=fffffe0000033000 [ 1134.473106] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1134.504898] CR0=0000000080050033 CR3=000000005b650000 CR4=00000000001426e0 [ 1134.538856] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff88001360 [ 1134.556150] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1134.563639] *** Control State *** [ 1134.585380] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 1134.622157] EntryControls=0000d1ff ExitControls=002fefff [ 1134.645853] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1134.652822] VMEntry: intr_info=00000306 errcode=00000000 ilen=00000000 [ 1134.699904] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1134.713766] reason=80000021 qualification=0000000000000002 [ 1134.720092] IDTVectoring: info=00000000 errcode=00000000 02:21:46 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x7f', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:46 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x80000) 02:21:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0xc00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000fe9000/0x1000)=nil, 0x1000}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="f666790f232a642ef4c4c1c573d6e264660f143966baf80cb8b855cc8aef66bafc0c66b8d00066efc4e2b128e90f210a3ede58000f30", 0x36}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:21:46 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1134.769654] TSC Offset = 0xfffffd9ec42a2a06 [ 1134.774090] EPT pointer = 0x0000000050b7e01e [ 1134.921389] FS-Cache: Duplicate cookie detected [ 1134.926661] FS-Cache: O-cookie c=00000000a30df661 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1134.935325] FS-Cache: O-cookie d=00000000869bc68d n=0000000063e243fc [ 1134.943021] FS-Cache: O-key=[10] '0200020000807f000008' [ 1134.949660] FS-Cache: N-cookie c=0000000051dee04d [p=000000004f092a8c fl=2 nc=0 na=1] [ 1134.958063] FS-Cache: N-cookie d=00000000869bc68d n=00000000d5b715c6 [ 1134.965180] FS-Cache: N-key=[10] '0200020000807f000008' 02:21:46 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x01', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x700000000000000) 02:21:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:47 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) write(r2, &(0x7f0000000480), 0x7536aeb8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:21:47 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x1100) 02:21:47 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1135.375427] *** Guest State *** [ 1135.378757] CR0: actual=0x0000000080000039, shadow=0x00000000e0000019, gh_mask=fffffffffffffff7 [ 1135.491189] FS-Cache: Duplicate cookie detected [ 1135.496269] FS-Cache: O-cookie c=00000000520d2b4e [p=000000004f092a8c fl=222 nc=0 na=1] [ 1135.504706] FS-Cache: O-cookie d=00000000869bc68d n=000000001d37a8e5 [ 1135.511350] FS-Cache: O-key=[10] '0200020000807f000008' [ 1135.517438] FS-Cache: N-cookie c=0000000003244eb6 [p=000000004f092a8c fl=2 nc=0 na=1] [ 1135.525645] FS-Cache: N-cookie d=00000000869bc68d n=000000003fb97f7f [ 1135.532341] FS-Cache: N-key=[10] '0200020000807f000008' [ 1135.563662] CR4: actual=0x0000000000002070, shadow=0x0000000000000030, gh_mask=ffffffffffffe871 [ 1135.595807] CR3 = 0x0000000000004000 02:21:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x4) 02:21:47 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1135.613039] PDPTR0 = 0x00000000000000e7 PDPTR1 = 0x0000000000000000 [ 1135.646451] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1135.672100] RSP = 0x0000000000000f6e RIP = 0x000000000000912c [ 1135.722411] RFLAGS=0x00000006 DR7 = 0x0000000000000400 [ 1135.768324] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 [ 1135.811767] CS: sel=0x0010, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 1135.830981] FS-Cache: Duplicate cookie detected [ 1135.837049] FS-Cache: O-cookie c=00000000520d2b4e [p=000000004f092a8c fl=222 nc=0 na=1] [ 1135.845392] FS-Cache: O-cookie d=00000000869bc68d n=000000001d37a8e5 [ 1135.852139] FS-Cache: O-key=[10] '0200020000807f000008' 02:21:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x2) [ 1135.858408] FS-Cache: N-cookie c=00000000d6fbf06a [p=000000004f092a8c fl=2 nc=0 na=1] [ 1135.866633] FS-Cache: N-cookie d=00000000869bc68d n=000000002da2c459 [ 1135.873279] FS-Cache: N-key=[10] '0200020000807f000008' 02:21:47 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1135.959797] DS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1135.973688] SS: sel=0x0038, attr=0x04093, limit=0x0000ffff, base=0x0000000000000000 [ 1135.991249] ES: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1136.031339] FS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 02:21:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x60000000) [ 1136.087487] GS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1136.159502] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 1136.217931] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 1136.243942] IDTR: limit=0x000001ff, base=0x0000000000003800 02:21:48 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1136.274527] TR: sel=0x00d0, attr=0x0008b, limit=0x000001ff, base=0x0000000000004e00 02:21:48 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1136.328135] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 1136.374678] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1136.474920] Interruptibility = 00000000 ActivityState = 00000000 [ 1136.482649] FS-Cache: Duplicate cookie detected [ 1136.487668] FS-Cache: O-cookie c=00000000fab184fc [p=000000004f092a8c fl=222 nc=0 na=1] [ 1136.496159] FS-Cache: O-cookie d=00000000869bc68d n=000000004166b8ab [ 1136.502777] FS-Cache: O-key=[10] '0200020000807f000008' [ 1136.508874] FS-Cache: N-cookie c=0000000035078847 [p=000000004f092a8c fl=2 nc=0 na=1] [ 1136.517032] *** Host State *** [ 1136.517049] RIP = 0xffffffff811f97e0 RSP = 0xffff8880858c7670 [ 1136.517071] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1136.520295] FS-Cache: N-cookie d=00000000869bc68d n=00000000549eb30f [ 1136.540576] FS-Cache: N-key=[10] '0200020000807f000008' [ 1136.541163] FSBase=00007f7cd4060700 GSBase=ffff8880ae600000 TRBase=fffffe0000033000 [ 1136.573610] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1136.579668] CR0=0000000080050033 CR3=00000000a4f10000 CR4=00000000001426f0 [ 1136.603549] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff88001360 [ 1136.610232] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1136.633589] *** Control State *** [ 1136.637060] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 1136.653575] EntryControls=0000d1ff ExitControls=002fefff [ 1136.659051] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1136.674891] VMEntry: intr_info=00000306 errcode=00000000 ilen=00000000 02:21:48 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x200, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000003c0)={[{0xe, 0xffffffff, 0x8, 0x295, 0x7fffffff, 0x6, 0xfffffffffffff001, 0x2ea5, 0x1, 0x4, 0xfffffffffffeffff, 0x1, 0x5}, {0x1, 0x1, 0x1f, 0xbf, 0x7, 0x949, 0x2, 0x100, 0x4, 0x3e88, 0x7, 0x2, 0xfffffffffffff800}, {0xfff, 0x1, 0x9, 0x1, 0x0, 0x101, 0x6, 0x2, 0x346, 0x3, 0xfffffffffffffff9, 0x3, 0x8f}], 0xa2ab}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000440)={0x1, 0x7}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80100, 0x0) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000080)=0xefe6, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) setresgid(r5, r6, r7) 02:21:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x10000000) [ 1136.690098] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1136.698774] reason=80000021 qualification=0000000000000002 [ 1136.710052] IDTVectoring: info=00000000 errcode=00000000 [ 1136.721650] TSC Offset = 0xfffffd9dbede36e8 [ 1136.732124] EPT pointer = 0x000000005ef5b01e 02:21:48 executing program 0: socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/sys/net/ipv4/vs/lblc_expiration\x00\x9b(4\x93\x8dK\xda57\x8f\x9b\x9d\x1d\xe1\x82\xcd\x81\xdc\xba{\xdd\r \x8f@Pj\xa7 \x18\x04f\xaa,\x92\x8f\x1d^(\x998/s\xe2\x02]<\\\xb2', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000200)={0x1, &(0x7f0000000440)=[{}]}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x8001, 0x800000}, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x80807, 0xfffffffffffffffd, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GP\x1a\x00\xf9\xd3\xc4q\xb4\xa5C\v\x11i\x1d\x81\xfbK\x9cI\x10j\xb3\xa0\x1e\xaan\x14\x94\xe1\x01\x12\xf6\xe5\'\xa7F\x96\x1b-\xa6a\xbc\x05\x17\xd1\xfe\xd1$\xf6\xef\xb4)-\xc4\xc6\xdfR\xa2\xc0b<\xdc\x1a\x18v}\x96\x1c&\xd3\xaa\x8cc:#Ig\xdf\xe0G\xb1Y\x97\xef\xc5\xa3\xbbR,\xb098F\xdc\xc3\xf6\xe7j(\x865i|d+<\xc7\xb3\xb3k=\x13T\xddP\x87\x12\xa1\xf1^;T-\x8a\f\f\x9as\xd1\x9d\x95+\xce\xf7\xd7\xd5\xcbp;D\xc4\xf1~_v\xe7\xa2\xf9\xc4N\ao\xb1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a58c67b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c9f5a537a66377bbc", 0x43}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f00000006c0)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000380)={'bond_slave_1\x00', 0x400}) gettid() clone(0x2902001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') exit(0x0) memfd_create(&(0x7f0000000340)='\x00', 0x4) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000002c0)={0x30}, 0xfffffcfc) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000300)=[0x7f, 0x9]) 02:21:48 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\xff', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1136.852029] Unknown ioctl 1081126560 02:21:48 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1136.930342] Unknown ioctl 1074310930 02:21:48 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1136.982459] *** Guest State *** 02:21:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x3f00) [ 1137.013914] CR0: actual=0x0000000080000039, shadow=0x00000000e0000019, gh_mask=fffffffffffffff7 [ 1137.049192] CR4: actual=0x0000000000002070, shadow=0x0000000000000030, gh_mask=ffffffffffffe871 [ 1137.060790] CR3 = 0x0000000000004000 [ 1137.070642] PDPTR0 = 0x00000000000000e7 PDPTR1 = 0x0000000000000000 [ 1137.073032] FS-Cache: Duplicate cookie detected [ 1137.082375] FS-Cache: O-cookie c=000000001e27ad75 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1137.084870] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1137.090816] FS-Cache: O-cookie d=00000000869bc68d n=00000000af506986 [ 1137.097642] RSP = 0x0000000000000f6e RIP = 0x000000000000912c 02:21:48 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\xff', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1137.103854] FS-Cache: O-key=[10] '0200020000807f000008' [ 1137.110270] RFLAGS=0x00000006 DR7 = 0x0000000000000400 [ 1137.115441] FS-Cache: N-cookie c=0000000069c10667 [p=000000004f092a8c fl=2 nc=0 na=1] [ 1137.121754] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 [ 1137.129456] FS-Cache: N-cookie d=00000000869bc68d n=000000001bfc6142 [ 1137.136661] CS: sel=0x0010, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 1137.142843] FS-Cache: N-key=[10] '0200020000807f000008' [ 1137.151281] DS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 02:21:49 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1137.217882] SS: sel=0x0038, attr=0x04093, limit=0x0000ffff, base=0x0000000000000000 [ 1137.241489] ES: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1137.252208] FS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1137.274251] GS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1137.303640] GDTR: limit=0x000007ff, base=0x0000000000001000 02:21:49 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000740)='/dev/radio#\x00', 0x3, 0x2) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x1) 02:21:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x500) [ 1137.337833] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 1137.359501] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 1137.381461] TR: sel=0x00d0, attr=0x0008b, limit=0x000001ff, base=0x0000000000004e00 [ 1137.413442] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 1137.427921] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1137.437563] Interruptibility = 00000000 ActivityState = 00000000 02:21:49 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000640)='fdinfo\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0xfffffffffffffed5) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x7fffffff, 0x0, 0x9, 0x80000001, 0x0, 0x3, 0x80, 0x8, 0xcbc8, 0x3f, 0x3, 0x9942, 0x2, 0x3, 0x9, 0x4, 0x9, 0xc6, 0x1ff, 0x2, 0x7, 0xffff, 0x10000000000, 0x80000000, 0x5, 0x1, 0x80, 0xfff, 0x0, 0x1f, 0x2, 0x1000, 0x7, 0xb0, 0x49eb, 0x3ff, 0x0, 0x4, 0x2, @perf_config_ext={0x3, 0x69df}, 0x0, 0x9, 0x6, 0x1, 0x3ff, 0x800, 0xffffffffffff8001}, r3, 0x1, r2, 0x2) [ 1137.465691] *** Host State *** [ 1137.489101] RIP = 0xffffffff811f97e0 RSP = 0xffff888054ecf670 [ 1137.509526] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1137.519697] FSBase=00007f7cd4060700 GSBase=ffff8880ae700000 TRBase=fffffe0000003000 [ 1137.575192] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1137.612045] CR0=0000000080050033 CR3=000000005ef78000 CR4=00000000001426e0 [ 1137.643978] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff88001360 [ 1137.664762] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1137.693709] *** Control State *** [ 1137.704562] Unknown ioctl 1081126560 [ 1137.706106] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 1137.766654] EntryControls=0000d1ff ExitControls=002fefff [ 1137.791195] Unknown ioctl 1074310930 [ 1137.804785] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1137.832576] VMEntry: intr_info=00000306 errcode=00000000 ilen=00000000 [ 1137.857630] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1137.880338] reason=80000021 qualification=0000000000000002 [ 1137.900457] IDTVectoring: info=00000000 errcode=00000000 [ 1137.928213] TSC Offset = 0xfffffd9ce4cb6166 [ 1137.945891] EPT pointer = 0x000000008a64001e 02:21:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) 02:21:49 executing program 0: setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2000000008}, 0x1c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400400, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x0, r3, 0x30, 0x0, @ib={0x1b, 0x1, 0x4, {"9f8a494fe91337dfcf3516eec682e944"}, 0x0, 0x4, 0x8}}}, 0xa0) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000027, 0x0) 02:21:49 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs.', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:49 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x80, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) prlimit64(r2, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000006240)='/dev/ppp\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f0000005cc0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005e40)="b4ba6d7006e302f430ab83b4e14ebd5607c5be51b6c1da0f03489650d47497760b9ee91dbb709e73d4", 0x29}], 0x1, 0x0, 0x0, 0x800}, 0x2}], 0x1, 0x20040004) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000180)) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x2, 0x7ff, 0x9}}) tee(0xffffffffffffffff, r4, 0x2, 0x8) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000000)={0x0, 0x8d8c}) r5 = syz_open_pts(r4, 0x0) write(r4, &(0x7f0000c34fff), 0xffffff0b) renameat2(r3, &(0x7f0000000080)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00', 0x1) dup3(r4, r5, 0x80000) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x5, 0x5, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="2f6465762f736738000b53ab219b2dd9151e98330d034768a83e6e847b2b11680b29bc3259c3cfb944acae4a5c6d2b149269b06eddd64f976f05aabb4353b107543d24846bdb64aa90097276f574a88e8e5c61821b6ebdf567cff92150787a00db3a4a6305c3e7eed3940c0aefe631cb497c2491"], &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='minix\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x3ff) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000240)={0x6, 0x7, 0x8000}, 0x4) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) 02:21:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x179d) 02:21:49 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:21:50 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:50 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) mincore(&(0x7f000000b000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/133) 02:21:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ptrace$setopts(0x4200, r3, 0x80, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) 02:21:50 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2008}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x80) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0xa}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1b) [ 1138.527148] *** Guest State *** [ 1138.555204] CR0: actual=0x0000000080000039, shadow=0x00000000e0000019, gh_mask=fffffffffffffff7 [ 1138.622348] CR4: actual=0x0000000000002070, shadow=0x0000000000000030, gh_mask=ffffffffffffe871 02:21:50 executing program 0: r0 = socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x5, 0xffffff87, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) fcntl$setlease(r0, 0x400, 0x1) 02:21:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) [ 1138.670961] CR3 = 0x0000000000004000 [ 1138.698591] PDPTR0 = 0x00000000000000e7 PDPTR1 = 0x0000000000000000 [ 1138.729417] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1138.761653] RSP = 0x0000000000000f6e RIP = 0x000000000000912c [ 1138.773782] RFLAGS=0x00000006 DR7 = 0x0000000000000400 02:21:50 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000780)=ANY=[@ANYRES64], 0x1) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x9ae, 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000100)={0x4000000, 0x0, 0xb}) r3 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x20, 0xffffffff, 0x3ff, 0x2, 0xa7e1}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000340), 0x584, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r5, r5}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000002c0)={r4, 0x0, 0x2, 0x401, 0x7}) [ 1138.805599] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 [ 1138.867334] CS: sel=0x0010, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 1138.919362] DS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 02:21:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) [ 1138.960487] SS: sel=0x0038, attr=0x04093, limit=0x0000ffff, base=0x0000000000000000 [ 1139.017184] ES: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1139.070913] FS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1139.114156] GS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1139.153668] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 1139.190361] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 1139.210795] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 1139.235827] TR: sel=0x00d0, attr=0x0008b, limit=0x000001ff, base=0x0000000000004e00 [ 1139.254168] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 1139.267500] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1139.284759] Interruptibility = 00000000 ActivityState = 00000000 [ 1139.323623] *** Host State *** [ 1139.332171] RIP = 0xffffffff811f97e0 RSP = 0xffff8880509f7670 [ 1139.353647] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1139.373634] FSBase=00007f7cd4060700 GSBase=ffff8880ae700000 TRBase=fffffe0000003000 [ 1139.394627] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1139.400633] CR0=0000000080050033 CR3=00000000555e3000 CR4=00000000001426e0 [ 1139.423628] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff88001360 [ 1139.430420] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1139.437290] *** Control State *** [ 1139.446801] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 1139.463617] EntryControls=0000d1ff ExitControls=002fefff [ 1139.469192] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1139.493587] VMEntry: intr_info=00000306 errcode=00000000 ilen=00000000 [ 1139.500385] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1139.523697] reason=80000021 qualification=0000000000000002 [ 1139.530143] IDTVectoring: info=00000000 errcode=00000000 [ 1139.543574] TSC Offset = 0xfffffd9c0e95e966 [ 1139.554472] EPT pointer = 0x000000008f90101e 02:21:51 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x80, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) prlimit64(r2, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000006240)='/dev/ppp\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f0000005cc0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005e40)="b4ba6d7006e302f430ab83b4e14ebd5607c5be51b6c1da0f03489650d47497760b9ee91dbb709e73d4", 0x29}], 0x1, 0x0, 0x0, 0x800}, 0x2}], 0x1, 0x20040004) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000180)) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x2, 0x7ff, 0x9}}) tee(0xffffffffffffffff, r4, 0x2, 0x8) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000000)={0x0, 0x8d8c}) r5 = syz_open_pts(r4, 0x0) write(r4, &(0x7f0000c34fff), 0xffffff0b) renameat2(r3, &(0x7f0000000080)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00', 0x1) dup3(r4, r5, 0x80000) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x5, 0x5, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="2f6465762f736738000b53ab219b2dd9151e98330d034768a83e6e847b2b11680b29bc3259c3cfb944acae4a5c6d2b149269b06eddd64f976f05aabb4353b107543d24846bdb64aa90097276f574a88e8e5c61821b6ebdf567cff92150787a00db3a4a6305c3e7eed3940c0aefe631cb497c2491"], &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='minix\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x3ff) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000240)={0x6, 0x7, 0x8000}, 0x4) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) 02:21:51 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:51 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write(r1, &(0x7f0000000480), 0x7536aeb8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:21:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x7000000) 02:21:51 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) 02:21:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x1b9, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x8080, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f00000000c0)=0x1f) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1139.903071] FS-Cache: Duplicate cookie detected [ 1139.909092] FS-Cache: O-cookie c=000000007160e046 [p=000000004f092a8c fl=222 nc=0 na=1] [ 1139.919727] FS-Cache: O-cookie d=00000000869bc68d n=00000000914e5185 [ 1139.926521] FS-Cache: O-key=[10] '0200020000807f000008' [ 1139.932411] FS-Cache: N-cookie c=000000002d2c3b64 [p=000000004f092a8c fl=2 nc=0 na=1] [ 1139.940667] FS-Cache: N-cookie d=00000000869bc68d n=0000000074be5eb9 [ 1139.947281] FS-Cache: N-key=[10] '0200020000807f000008' [ 1139.992517] *** Guest State *** [ 1140.017702] CR0: actual=0x0000000080000039, shadow=0x00000000e0000019, gh_mask=fffffffffffffff7 [ 1140.033709] CR4: actual=0x0000000000002070, shadow=0x0000000000000030, gh_mask=ffffffffffffe871 02:21:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x11000000) [ 1140.078314] CR3 = 0x0000000000004000 [ 1140.116844] PDPTR0 = 0x00000000000000e7 PDPTR1 = 0x0000000000000000 [ 1140.159084] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1140.193688] RSP = 0x0000000000000f6e RIP = 0x000000000000912c [ 1140.204734] RFLAGS=0x00000006 DR7 = 0x0000000000000400 [ 1140.226635] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 [ 1140.250520] CS: sel=0x0010, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 1140.280864] DS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1140.312161] SS: sel=0x0038, attr=0x04093, limit=0x0000ffff, base=0x0000000000000000 [ 1140.341659] ES: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 02:21:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x6000000) [ 1140.370151] FS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 [ 1140.383711] GS: sel=0x0000, attr=0x100f3, limit=0x0000ffff, base=0x0000000000000000 02:21:52 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1140.472131] GDTR: limit=0x000007ff, base=0x0000000000001000 02:21:52 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x80, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) prlimit64(r2, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000006240)='/dev/ppp\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f0000005cc0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005e40)="b4ba6d7006e302f430ab83b4e14ebd5607c5be51b6c1da0f03489650d47497760b9ee91dbb709e73d4", 0x29}], 0x1, 0x0, 0x0, 0x800}, 0x2}], 0x1, 0x20040004) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000180)) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x2, 0x7ff, 0x9}}) tee(0xffffffffffffffff, r4, 0x2, 0x8) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000000)={0x0, 0x8d8c}) r5 = syz_open_pts(r4, 0x0) write(r4, &(0x7f0000c34fff), 0xffffff0b) renameat2(r3, &(0x7f0000000080)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00', 0x1) dup3(r4, r5, 0x80000) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x5, 0x5, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="2f6465762f736738000b53ab219b2dd9151e98330d034768a83e6e847b2b11680b29bc3259c3cfb944acae4a5c6d2b149269b06eddd64f976f05aabb4353b107543d24846bdb64aa90097276f574a88e8e5c61821b6ebdf567cff92150787a00db3a4a6305c3e7eed3940c0aefe631cb497c2491"], &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='minix\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x3ff) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000240)={0x6, 0x7, 0x8000}, 0x4) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) [ 1140.569804] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 02:21:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0xc0000) [ 1140.687977] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 1140.741512] TR: sel=0x00d0, attr=0x0008b, limit=0x000001ff, base=0x0000000000004e00 [ 1140.794019] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 1140.800573] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 02:21:52 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000280)={0x5, 0x8001}) write(r2, &(0x7f0000000480), 0x7536aeb8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1140.883820] Interruptibility = 00000000 ActivityState = 00000000 [ 1140.925202] *** Host State *** [ 1140.934233] RIP = 0xffffffff811f97e0 RSP = 0xffff88804a41f670 [ 1140.969183] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1140.993749] FSBase=00007f7cd4060700 GSBase=ffff8880ae700000 TRBase=fffffe0000033000 [ 1141.029414] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1141.063992] CR0=0000000080050033 CR3=000000004dc5b000 CR4=00000000001426e0 [ 1141.071163] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff88001360 [ 1141.107003] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1141.130817] *** Control State *** [ 1141.154703] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 1141.174725] EntryControls=0000d1ff ExitControls=002fefff [ 1141.214777] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1141.236597] VMEntry: intr_info=00000306 errcode=00000000 ilen=00000000 02:21:53 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x80, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) prlimit64(r2, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000006240)='/dev/ppp\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f0000005cc0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005e40)="b4ba6d7006e302f430ab83b4e14ebd5607c5be51b6c1da0f03489650d47497760b9ee91dbb709e73d4", 0x29}], 0x1, 0x0, 0x0, 0x800}, 0x2}], 0x1, 0x20040004) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000180)) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x2, 0x7ff, 0x9}}) tee(0xffffffffffffffff, r4, 0x2, 0x8) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000000)={0x0, 0x8d8c}) r5 = syz_open_pts(r4, 0x0) write(r4, &(0x7f0000c34fff), 0xffffff0b) renameat2(r3, &(0x7f0000000080)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00', 0x1) dup3(r4, r5, 0x80000) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x5, 0x5, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="2f6465762f736738000b53ab219b2dd9151e98330d034768a83e6e847b2b11680b29bc3259c3cfb944acae4a5c6d2b149269b06eddd64f976f05aabb4353b107543d24846bdb64aa90097276f574a88e8e5c61821b6ebdf567cff92150787a00db3a4a6305c3e7eed3940c0aefe631cb497c2491"], &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='minix\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x3ff) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000240)={0x6, 0x7, 0x8000}, 0x4) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) 02:21:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x5000000000000) 02:21:53 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\n\xe5\xfe\x00\x00\b@\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\n', 0x0, &(0x7f000000a000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000000080)="290000b1c315e9050860ebf201ff6cdeb9540c3df00fd57f25ffffff0100002a00f3ff0984000000000000000000000000", 0x31) [ 1141.271536] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1141.319566] reason=80000021 qualification=0000000000000002 [ 1141.345258] IDTVectoring: info=00000000 errcode=00000000 [ 1141.394136] TSC Offset = 0xfffffd9b468042a3 [ 1141.429731] EPT pointer = 0x000000009ec5501e 02:21:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0xa1, &(0x7f0000000280)="1fe2eaebb9bcf9a0b97ef3bb0acddbc0aba17fbd7d67bfa9e6c3bcf5af0119a34459ae555a2b77b7459acde66ffe9e76b0f0521689b99faae5e43acc6a8bebf7262f2a3047d50afe00b5fa66dcb9ea4cd73d3319fe17a4f35cd66eebd025cda9c5e0978b1e8d1f6e41c5131e085fae255253b359f1dc9e5e96c52c8340b2866535cd039852cd42c4224d4edd082f2217f34ba9a56e32a2cfb609f1edcf08d342f8"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0xff00000000000000) [ 1141.491779] WARNING: CPU: 1 PID: 15879 at arch/x86/kvm/mmu.c:830 mmu_spte_clear_track_bits+0x43a/0x500 [ 1141.502674] Kernel panic - not syncing: panic_on_warn set ... [ 1141.508576] CPU: 1 PID: 15879 Comm: syz-executor4 Not tainted 4.20.0+ #2 [ 1141.515417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1141.524774] Call Trace: [ 1141.527378] dump_stack+0x1db/0x2d0 [ 1141.531023] ? dump_stack_print_info.cold+0x20/0x20 [ 1141.536070] ? mmu_spte_clear_track_bits+0x380/0x500 [ 1141.541189] panic+0x2cb/0x589 [ 1141.544395] ? add_taint.cold+0x16/0x16 [ 1141.548388] ? mmu_spte_clear_track_bits+0x43a/0x500 [ 1141.553509] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1141.559066] ? __probe_kernel_read+0x1f4/0x250 [ 1141.563671] ? __warn.cold+0x5/0x4b [ 1141.567315] ? mmu_spte_clear_track_bits+0x43a/0x500 [ 1141.572436] __warn.cold+0x20/0x4b [ 1141.573426] kobject: 'kvm' (000000009bf87733): kobject_uevent_env [ 1141.575998] ? mmu_spte_clear_track_bits+0x43a/0x500 [ 1141.582467] kobject: 'kvm' (000000009bf87733): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1141.587400] report_bug+0x263/0x2b0 [ 1141.587423] do_error_trap+0x11b/0x200 [ 1141.587442] do_invalid_op+0x37/0x50 [ 1141.587459] ? mmu_spte_clear_track_bits+0x43a/0x500 [ 1141.587483] invalid_op+0x14/0x20 [ 1141.587501] RIP: 0010:mmu_spte_clear_track_bits+0x43a/0x500 [ 1141.621931] Code: 45 89 67 90 31 ff 44 89 e6 48 ba 00 00 00 00 00 fc ff df c6 04 10 f8 e8 84 5d 70 00 45 85 e4 0f 85 74 fd ff ff e8 f6 5b 70 00 <0f> 0b e9 68 fd ff ff e8 ea 5b 70 00 4c 89 f7 e8 a2 24 f7 ff 31 f6 [ 1141.638370] kobject: 'kvm' (000000009bf87733): kobject_uevent_env [ 1141.640849] RSP: 0018:ffff88804a4df0d8 EFLAGS: 00010212 [ 1141.640863] RAX: 0000000000040000 RBX: 400000005f860c77 RCX: ffffc9000e645000 [ 1141.640873] RDX: 0000000000008fce RSI: ffffffff811125ba RDI: 0000000000000005 [ 1141.640884] RBP: ffff88804a4df1b0 R08: ffff8880514505c0 R09: fffff940002fc307 [ 1141.640893] R10: fffff940002fc306 R11: ffffea00017e1837 R12: 0000000000000000 [ 1141.640902] R13: 1ffff1100949be1d R14: 000000000005f860 R15: ffff88804a4df188 [ 1141.640934] ? mmu_spte_clear_track_bits+0x43a/0x500 [ 1141.656008] kobject: 'kvm' (000000009bf87733): kobject_uevent_env [ 1141.659787] ? mmu_spte_clear_track_bits+0x43a/0x500 [ 1141.659806] ? mmu_spte_update+0x330/0x330 [ 1141.659832] ? mark_held_locks+0x100/0x100 [ 1141.674136] kobject: 'kvm' (000000009bf87733): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1141.674386] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1141.687000] kobject: 'kvm' (000000009bf87733): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1141.688907] ? __pte_list_remove+0x94/0x460 [ 1141.688932] drop_spte+0x24/0x220 [ 1141.688962] mmu_page_zap_pte+0x2e2/0x3b0 [ 1141.688980] ? drop_spte+0x220/0x220 [ 1141.752960] ? __lock_is_held+0xb6/0x140 [ 1141.757055] kvm_mmu_prepare_zap_page+0x19d/0x1440 [ 1141.761996] ? debug_check_no_obj_freed+0x2f8/0x588 [ 1141.767028] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1141.772576] ? check_preemption_disabled+0x48/0x290 [ 1141.777615] ? kvm_handle_hva_range+0x730/0x730 [ 1141.782292] ? kvm_make_vcpus_request_mask+0x481/0x5a0 [ 1141.787577] ? mark_held_locks+0x100/0x100 [ 1141.791826] ? gfn_to_pfn_atomic+0x6c0/0x6c0 [ 1141.796279] ? add_lock_to_list.isra.0+0x450/0x450 [ 1141.801228] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1141.806774] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1141.812323] ? check_preemption_disabled+0x48/0x290 [ 1141.817358] ? kvm_make_vcpus_request_mask+0x5a0/0x5a0 [ 1141.822661] kvm_mmu_invalidate_zap_all_pages+0x53e/0x710 [ 1141.828217] ? kvm_mmu_zap_collapsible_sptes+0x830/0x830 [ 1141.833720] ? lock_release+0xc40/0xc40 [ 1141.837736] ? rcu_sync_dtor+0x170/0x170 [ 1141.841818] kvm_arch_flush_shadow_all+0x16/0x20 [ 1141.846592] kvm_mmu_notifier_release+0x5c/0x90 [ 1141.851268] ? kvm_vcpu_on_spin+0x800/0x800 [ 1141.855610] mmu_notifier_unregister+0x1dd/0x5e0 [ 1141.860376] ? kvm_vcpu_on_spin+0x800/0x800 [ 1141.864714] ? __mmu_notifier_register+0x30/0x30 [ 1141.869530] ? free_pages+0x46/0x50 [ 1141.873175] kvm_put_kvm+0x6aa/0xff0 [ 1141.876915] ? kvm_write_guest_cached+0x40/0x40 [ 1141.881688] ? fcntl_setlk+0xfe0/0xfe0 [ 1141.885599] ? kvm_irqfd_release+0xe2/0x120 [ 1141.889926] ? kvm_irqfd_release+0xe2/0x120 [ 1141.894276] kvm_vm_release+0x44/0x60 [ 1141.898093] __fput+0x3c5/0xb10 [ 1141.901423] ? kvm_put_kvm+0xff0/0xff0 [ 1141.905330] ? get_max_files+0x20/0x20 [ 1141.909230] ? task_work_run+0x1bb/0x2b0 [ 1141.913303] ? trace_hardirqs_off_caller+0x300/0x300 [ 1141.918454] ? do_raw_spin_trylock+0x270/0x270 [ 1141.923059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1141.928610] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1141.934166] ____fput+0x16/0x20 [ 1141.937461] task_work_run+0x1f4/0x2b0 [ 1141.941370] ? task_work_cancel+0x2c0/0x2c0 [ 1141.945790] ? __fget+0x472/0x710 [ 1141.949261] get_signal+0x168d/0x19b0 [ 1141.953079] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1141.958633] ? lock_downgrade+0x910/0x910 [ 1141.962798] ? kasan_check_read+0x11/0x20 [ 1141.966972] ? ptrace_notify+0x130/0x130 [ 1141.971044] ? rcu_read_unlock_special+0x380/0x380 [ 1141.976000] ? __fget+0x499/0x710 [ 1141.979560] do_signal+0x91/0x1e80 [ 1141.983110] ? iterate_fd+0x4b0/0x4b0 [ 1141.986929] ? kvm_unregister_device_ops+0x70/0x70 [ 1141.991880] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1141.997431] ? do_vfs_ioctl+0x11e/0x17d0 [ 1142.001516] ? setup_sigcontext+0x7d0/0x7d0 [ 1142.005850] ? check_preemption_disabled+0x48/0x290 [ 1142.010885] ? exit_to_usermode_loop+0x98/0x3b0 [ 1142.015569] ? exit_to_usermode_loop+0x98/0x3b0 [ 1142.020250] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1142.025364] ? trace_hardirqs_on+0xbd/0x310 [ 1142.029709] ? do_syscall_64+0x696/0x800 [ 1142.033781] ? trace_hardirqs_off_caller+0x300/0x300 [ 1142.038912] ? cpumask_weight.constprop.0+0x3f/0x3f [ 1142.043958] ? prepare_exit_to_usermode+0x32e/0x3b0 [ 1142.048993] ? do_syscall_64+0x8c/0x800 [ 1142.052994] exit_to_usermode_loop+0x2f7/0x3b0 [ 1142.057606] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1142.062990] ? syscall_trace_enter+0x12a0/0x12a0 [ 1142.067759] ? ksys_ioctl+0x82/0xd0 [ 1142.071421] do_syscall_64+0x696/0x800 [ 1142.075316] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1142.080262] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1142.085295] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1142.090157] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1142.095351] RIP: 0033:0x457d37 [ 1142.098554] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 cd b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1142.117457] RSP: 002b:00007f7cd3ffb098 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1142.125181] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000457d37 [ 1142.132458] RDX: 00007f7cd3ffb510 RSI: 000000004020ae46 RDI: 0000000000000004 [ 1142.139797] RBP: 0000000020fe8000 R08: 00007f7cd3ffb0a0 R09: 000000000073c180 [ 1142.147083] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000fec00000 [ 1142.154360] R13: 0000000000000004 R14: 00000000004db2c0 R15: 00000000ffffffff [ 1142.163490] Kernel Offset: disabled [ 1142.167749] Rebooting in 86400 seconds..