40)={r3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)) 14:21:12 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x4800, 0x0, &(0x7f00000002c0)}) 14:21:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40087602, 0x0) 14:21:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000580)="8b480a5252afb33127d9c2678e3d5485834b69457ad852d4657254001a5246eb9358d1efeab26a2f03344e00408382b4653ebdc90f2b3e6c6f5fa09bcf8de36fa4d4eb4ba27b3d286da79aed2c544577a256f42f292782657962ca55ab4f04b0a45d52a48226920f7c5aa534dcab802319f1aae2b217dd18aea4d58d9b5f87b9b2bd593ed3f84b91dcbdebad5e7c872126e18956c35a3e9fba732263ac86bf9f4e9360f76851366e744cfb3e245b7993fd78de5bae297a830adbab7f4ac6957b") socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) getuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000080)='./file0\x00', r1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x4, 0x20}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0xc020660b, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)={r3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)) 14:21:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x5000000) 14:21:13 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x3, 0x0, &(0x7f00000002c0)}) 14:21:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5452, 0x0) 14:21:13 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0xa0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000100)={{0x2, 0x4e20, @broadcast}, {0x307}, 0x8, {0x2, 0x4e22, @multicast1}, 'bond0\x00'}) 14:21:13 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140), 0x10) 14:21:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000580)="8b480a5252afb33127d9c2678e3d5485834b69457ad852d4657254001a5246eb9358d1efeab26a2f03344e00408382b4653ebdc90f2b3e6c6f5fa09bcf8de36fa4d4eb4ba27b3d286da79aed2c544577a256f42f292782657962ca55ab4f04b0a45d52a48226920f7c5aa534dcab802319f1aae2b217dd18aea4d58d9b5f87b9b2bd593ed3f84b91dcbdebad5e7c872126e18956c35a3e9fba732263ac86bf9f4e9360f76851366e744cfb3e245b7993fd78de5bae297a830adbab7f4ac6957b") socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) getuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000080)='./file0\x00', r1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x4, 0x20}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0xc020660b, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)={r3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)) 14:21:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x4800, 0x0, &(0x7f00000002c0)}) 14:21:13 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0xe, &(0x7f0000000140)={r0}, 0x10) 14:21:13 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'syzkaller1\x00', 0x400}) r1 = getpid() r2 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) accept(r2, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:13 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x74, &(0x7f00000002c0)}) 14:21:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0x0) 14:21:13 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) membarrier(0x8, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x5) 14:21:13 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x8, &(0x7f0000000140), 0x10) 14:21:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x4800, 0x0, &(0x7f00000002c0)}) 14:21:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4b49, 0x0) 14:21:13 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000100)=0x7) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000480)={0x10000, 0x9, 0x400, 0x401, 0x4ee3, 0xfffffffffffffffc, 0x3, 0xffffffff, 0x9, 0x40}) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80000, 0x0) mq_timedreceive(r2, &(0x7f0000000200)=""/197, 0xc5, 0x2, &(0x7f0000000140)={0x0, 0x1c9c380}) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000540)=0x5, 0x4) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') timerfd_settime(r2, 0x1, &(0x7f00000004c0)={{}, {0x77359400}}, &(0x7f0000000500)) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000580)={0x9, {{0x2, 0x4e24, @remote}}, 0x1, 0x6, [{{0x2, 0x4e24, @rand_addr=0x80000001}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}}, {{0x2, 0x4e21}}, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}}]}, 0x390) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}]}, 0x1c}}, 0x20000000) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/access\x00', 0x2, 0x0) 14:21:13 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x7400000000000000, &(0x7f00000002c0)}) 14:21:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000580)="8b480a5252afb33127d9c2678e3d5485834b69457ad852d4657254001a5246eb9358d1efeab26a2f03344e00408382b4653ebdc90f2b3e6c6f5fa09bcf8de36fa4d4eb4ba27b3d286da79aed2c544577a256f42f292782657962ca55ab4f04b0a45d52a48226920f7c5aa534dcab802319f1aae2b217dd18aea4d58d9b5f87b9b2bd593ed3f84b91dcbdebad5e7c872126e18956c35a3e9fba732263ac86bf9f4e9360f76851366e744cfb3e245b7993fd78de5bae297a830adbab7f4ac6957b") socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) getuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x4, 0x20}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc020660b, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)={r2}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)) [ 364.630929] binder_thread_write: 15 callbacks suppressed [ 364.630940] binder: 18937:18943 BC_FREE_BUFFER u0000000000000000 no match [ 364.659431] binder: 18945:18946 BC_FREE_BUFFER u0000000000000000 no match 14:21:13 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x6c000000, &(0x7f00000002c0)}) 14:21:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x4800, 0x0, &(0x7f00000002c0)}) 14:21:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc020660b, 0x0) 14:21:13 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r0, 0x80000) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) 14:21:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000580)="8b480a5252afb33127d9c2678e3d5485834b69457ad852d4657254001a5246eb9358d1efeab26a2f03344e00408382b4653ebdc90f2b3e6c6f5fa09bcf8de36fa4d4eb4ba27b3d286da79aed2c544577a256f42f292782657962ca55ab4f04b0a45d52a48226920f7c5aa534dcab802319f1aae2b217dd18aea4d58d9b5f87b9b2bd593ed3f84b91dcbdebad5e7c872126e18956c35a3e9fba732263ac86bf9f4e9360f76851366e744cfb3e245b7993fd78de5bae297a830adbab7f4ac6957b") socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) getuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000080)='./file0\x00', r1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x4, 0x20}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0xc020660b, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)={r3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)) [ 364.811397] binder: 18960:18961 BC_FREE_BUFFER u0000000000000000 no match [ 364.856233] binder: 18964:18967 BC_FREE_BUFFER u0000000000000000 no match 14:21:13 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x6, &(0x7f0000000140)={r0}, 0x10) 14:21:13 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x4800, 0x0, &(0x7f00000002c0)}) 14:21:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5460, 0x0) 14:21:13 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-', 0x1}, 0x28, 0x1) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x8000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev, @rand_addr}, &(0x7f0000000240)=0xc) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000280)={r3, @loopback, @multicast2}, 0xc) syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x7, 0x0) 14:21:13 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x6800, &(0x7f00000002c0)}) [ 365.035555] binder: 18982:18986 BC_FREE_BUFFER u0000000000000000 no match 14:21:14 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x10, &(0x7f0000000140), 0x10) 14:21:14 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000040)) r1 = getpid() r2 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) accept(r2, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0189436, 0x0) 14:21:14 executing program 1: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x4800, 0x0, &(0x7f00000002c0)}) 14:21:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000580)="8b480a5252afb33127d9c2678e3d5485834b69457ad852d4657254001a5246eb9358d1efeab26a2f03344e00408382b4653ebdc90f2b3e6c6f5fa09bcf8de36fa4d4eb4ba27b3d286da79aed2c544577a256f42f292782657962ca55ab4f04b0a45d52a48226920f7c5aa534dcab802319f1aae2b217dd18aea4d58d9b5f87b9b2bd593ed3f84b91dcbdebad5e7c872126e18956c35a3e9fba732263ac86bf9f4e9360f76851366e744cfb3e245b7993fd78de5bae297a830adbab7f4ac6957b") socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) getuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000080)='./file0\x00', r1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x4, 0x20}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0xc020660b, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)={r3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)) 14:21:14 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x4c, &(0x7f00000002c0)}) 14:21:14 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x840, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)) 14:21:14 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0xd, &(0x7f0000000140)={r0}, 0x10) [ 365.217320] binder: 19000:19011 BC_FREE_BUFFER u0000000000000000 no match 14:21:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000040)=[@acquire_done], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5421, 0x0) 14:21:14 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x1e118, &(0x7f00000002c0)}) 14:21:14 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0xffffffffffffffd9) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000400)) 14:21:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000580)="8b480a5252afb33127d9c2678e3d5485834b69457ad852d4657254001a5246eb9358d1efeab26a2f03344e00408382b4653ebdc90f2b3e6c6f5fa09bcf8de36fa4d4eb4ba27b3d286da79aed2c544577a256f42f292782657962ca55ab4f04b0a45d52a48226920f7c5aa534dcab802319f1aae2b217dd18aea4d58d9b5f87b9b2bd593ed3f84b91dcbdebad5e7c872126e18956c35a3e9fba732263ac86bf9f4e9360f76851366e744cfb3e245b7993fd78de5bae297a830adbab7f4ac6957b") socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) getuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000080)='./file0\x00', r1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x4, 0x20}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0xc020660b, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)={r3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)) 14:21:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000002c0)}) [ 365.381377] binder: 19032:19038 BC_FREE_BUFFER u0000000000000000 no match 14:21:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5450, 0x0) 14:21:14 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x700000000000000, &(0x7f00000002c0)}) [ 365.548997] binder: 19050:19052 BC_FREE_BUFFER u0000000000000000 no match 14:21:14 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000140), 0x10) 14:21:14 executing program 3: clone(0x1fffffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x1) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000040)={0x3, 0x0, 0x32e, 0xaa00000000000000, 0x9, 0x4, 0x5}) 14:21:14 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x35, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000040)={0x401, 0x8, 0x5, 0x1000, 0x80000001, 0x4}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x400, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) mq_timedreceive(r2, &(0x7f0000000100)=""/71, 0x47, 0x1, &(0x7f0000000240)={r3, r4+30000000}) 14:21:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000002c0)}) 14:21:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000580)="8b480a5252afb33127d9c2678e3d5485834b69457ad852d4657254001a5246eb9358d1efeab26a2f03344e00408382b4653ebdc90f2b3e6c6f5fa09bcf8de36fa4d4eb4ba27b3d286da79aed2c544577a256f42f292782657962ca55ab4f04b0a45d52a48226920f7c5aa534dcab802319f1aae2b217dd18aea4d58d9b5f87b9b2bd593ed3f84b91dcbdebad5e7c872126e18956c35a3e9fba732263ac86bf9f4e9360f76851366e744cfb3e245b7993fd78de5bae297a830adbab7f4ac6957b") socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) getuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000080)='./file0\x00', r1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0xc020660b, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)={r3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)) 14:21:14 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x4c000000, &(0x7f00000002c0)}) 14:21:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x80087601, 0x0) 14:21:14 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x10, &(0x7f0000000140)={r0}, 0x10) [ 365.705759] binder: 19063:19068 BC_FREE_BUFFER u0000000000000000 no match 14:21:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000002c0)}) 14:21:14 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x765, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x1) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) r1 = getuid() mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x19000, &(0x7f0000000200)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@aname={'aname', 0x3d, 'em0{'}}, {@cachetag={'cachetag', 0x3d, 'wlan0md5sumppp1'}}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@cache_fscache='cache=fscache'}, {@fscache='fscache'}, {@access_any='access=any'}, {@msize={'msize', 0x3d, 0x4aaddfb8}}]}}) 14:21:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x3, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) pause() 14:21:14 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x2000, &(0x7f00000002c0)}) 14:21:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000580)="8b480a5252afb33127d9c2678e3d5485834b69457ad852d4657254001a5246eb9358d1efeab26a2f03344e00408382b4653ebdc90f2b3e6c6f5fa09bcf8de36fa4d4eb4ba27b3d286da79aed2c544577a256f42f292782657962ca55ab4f04b0a45d52a48226920f7c5aa534dcab802319f1aae2b217dd18aea4d58d9b5f87b9b2bd593ed3f84b91dcbdebad5e7c872126e18956c35a3e9fba732263ac86bf9f4e9360f76851366e744cfb3e245b7993fd78de5bae297a830adbab7f4ac6957b") socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) getuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000080)='./file0\x00', r1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0xc020660b, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)={r3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)) 14:21:14 executing program 1: exit(0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r2 = dup2(r1, r0) write$P9_RLOCK(r2, &(0x7f0000000040)={0x8}, 0x8) [ 365.900389] binder_thread_write: 20 callbacks suppressed [ 365.900403] binder: 19093:19095 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:14 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000200)) [ 365.970054] binder: 19093:19095 BC_FREE_BUFFER u0000000000000000 no match 14:21:14 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x6000000, &(0x7f00000002c0)}) 14:21:14 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x12, &(0x7f0000000140), 0x10) [ 366.121129] binder: 19116:19119 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:15 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000040)) r3 = accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1000, 0x100000000, 0x8, "9235de793cd6ac3c632ffb9efd2ee558a9993893b7876207e27740cbf657b0fe5bacc5f29ef1d806e7a50242b39a31ac07825c27db08f51c16abe6f60fbae3e4d4d95d6fdb467fcc33be0b37247541f1"}, 0xd8) 14:21:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000580)="8b480a5252afb33127d9c2678e3d5485834b69457ad852d4657254001a5246eb9358d1efeab26a2f03344e00408382b4653ebdc90f2b3e6c6f5fa09bcf8de36fa4d4eb4ba27b3d286da79aed2c544577a256f42f292782657962ca55ab4f04b0a45d52a48226920f7c5aa534dcab802319f1aae2b217dd18aea4d58d9b5f87b9b2bd593ed3f84b91dcbdebad5e7c872126e18956c35a3e9fba732263ac86bf9f4e9360f76851366e744cfb3e245b7993fd78de5bae297a830adbab7f4ac6957b") socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) getuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000080)='./file0\x00', r1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x4, 0x20}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0xc020660b, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)={r3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)) 14:21:15 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) eventfd(0x3) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 14:21:15 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x12, &(0x7f0000000140)={r0}, 0x10) 14:21:15 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x74000000, &(0x7f00000002c0)}) 14:21:15 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x6, &(0x7f0000000140), 0x10) 14:21:15 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x101802) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x1, 0x6, 0x3, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={r2, 0x8, 0x0, 0x9, 0x20}, &(0x7f0000000200)=0x18) socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='/dev/audio#\x00', r1}, 0x10) write$P9_RLOPEN(r1, &(0x7f00000002c0)={0x18, 0xd, 0x2, {{0x4, 0x0, 0x2}, 0xffffffff}}, 0x18) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000340)={0x517d, {0x2, 0x4e24, @local}, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @local}, 0x21, 0x2, 0x0, 0x8f, 0x3, &(0x7f0000000300)='bond_slave_1\x00', 0x0, 0x0, 0x11}) [ 366.266309] binder: 19128:19138 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:15 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:15 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0xa, &(0x7f0000000140)={r0}, 0x10) 14:21:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x1, r1}) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:15 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x1000000, &(0x7f00000002c0)}) 14:21:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000580)="8b480a5252afb33127d9c2678e3d5485834b69457ad852d4657254001a5246eb9358d1efeab26a2f03344e00408382b4653ebdc90f2b3e6c6f5fa09bcf8de36fa4d4eb4ba27b3d286da79aed2c544577a256f42f292782657962ca55ab4f04b0a45d52a48226920f7c5aa534dcab802319f1aae2b217dd18aea4d58d9b5f87b9b2bd593ed3f84b91dcbdebad5e7c872126e18956c35a3e9fba732263ac86bf9f4e9360f76851366e744cfb3e245b7993fd78de5bae297a830adbab7f4ac6957b") socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) getuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000080)='./file0\x00', r1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x4, 0x20}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0xc020660b, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r3 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)={r3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)) [ 366.724217] binder: 19174:19175 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:15 executing program 1: exit(0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) setsockopt$inet_group_source_req(r2, 0x0, 0x0, &(0x7f0000000080)={0x0, {{0x2, 0x0, @multicast1}}}, 0xfffffffffffffd4e) 14:21:15 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:15 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) r1 = accept(r0, &(0x7f0000000040)=@ax25, &(0x7f0000000100)=0x80) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000300)={'filter\x00'}, &(0x7f0000000380)=0xfffffffffffffce0) 14:21:15 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x14, &(0x7f0000000140)={r0}, 0x10) 14:21:15 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x800, 0x8, &(0x7f0000002500)=[{&(0x7f0000000440)="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", 0x1000, 0x6}, {&(0x7f00000000c0)="2642296e59eaa1cde295cf7d0d3908407ccb777ba8fdb5a63a584fe743457ba44ca996b881e62456facc", 0x2a, 0xa9}, {&(0x7f0000000100)="4afe25a9c686c6863722", 0xa}, {&(0x7f0000000140)="2764a755ee6f2d9a1b6244056a16e4da8ec8d134a076b7ff8ba9b2d7baa3b9bc3c433c17b88cb8fb60ade1fa1b1aade8d325f383297cbccb6c0bc7d329268c5e46b05416510d906d15d0a7ba9c7e1550d662058d7a70cb15ad8ac91fceaff254c9845bab13e73b3f6b48c11c8dfc9784faa27858516b51c3533eade3dd57c952fc409f404d24cbeecc881b50af23b2e9941ba0eedf7a8e25e0ba8ee9257e65", 0x9f}, {&(0x7f0000000240)="02c4a280696e1a52e5828e35e077748edf4d717c548525dd2f3eb793f384416d07dc0091", 0x24, 0x3}, {&(0x7f0000000280)="83bcd3f23493d76963a653387f438799b5fa8babb7ea506854e580e8ae3ab1f31e34105249428a1c779003ed1bade74107c5ee38cc69d806bfe334dee1085615ffa78046b378e7ac1e4822d56b56a20f7d3799b89a89c2", 0x57, 0x6}, {&(0x7f0000001440)="f4201cc5f296c323ace283ce6759d9781c91295e24dfc41770ae7bbaf8b52411cae9ea5e064ebb2e74f3cd9d1918b71dd52c173e7953cec9f5d2dd51fbbe19e1248f636d6f6646db541600c3eabf21fe67bad81410569a7388d9b6da93d209008c43700c9f210c11984e919081d37f4d76d9ede33f824cb3bb0a3f7642bf23d1c974bf1aad5bf7540c1d47d8b2a9f03fab76c1687abebcde2f35b67cd4e9ce5f26579fc0c0c4d81d6ba1864d889070", 0xaf, 0xcbed}, {&(0x7f0000001500)="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", 0x1000, 0x5}], 0x20, &(0x7f0000000300)={[{@mtpt='mtpt'}, {@nodiscard='nodiscard'}, {@swalloc='swalloc'}, {@wsync='wsync'}, {@barrier='barrier'}, {@nobarrier='nobarrier'}]}) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:15 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x4800, &(0x7f00000002c0)}) 14:21:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x18000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, r1) 14:21:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000580)="8b480a5252afb33127d9c2678e3d5485834b69457ad852d4657254001a5246eb9358d1efeab26a2f03344e00408382b4653ebdc90f2b3e6c6f5fa09bcf8de36fa4d4eb4ba27b3d286da79aed2c544577a256f42f292782657962ca55ab4f04b0a45d52a48226920f7c5aa534dcab802319f1aae2b217dd18aea4d58d9b5f87b9b2bd593ed3f84b91dcbdebad5e7c872126e18956c35a3e9fba732263ac86bf9f4e9360f76851366e744cfb3e245b7993fd78de5bae297a830adbab7f4ac6957b") socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) getuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000080)='./file0\x00', r1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x4, 0x20}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0xc020660b, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)={r3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)) 14:21:15 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='#\x00', 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000100)="66a7b117d1a1dc71b3a4ef1b24473b1e4ae76893b22c741543062424bee5047168e7cc13b0b67069fa6c21970b9d781c52bd460a16915b4237fb2c086d8f4d6e88e4e7385c74d104fdad3920", &(0x7f0000000200)=""/4096}, 0x18) prctl$getname(0x10, &(0x7f0000001200)=""/117) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000001280)='trusted.overlay.upper\x00', &(0x7f00000012c0)={0x0, 0xfb, 0x1b, 0x1, 0x2, "f006ee9daa1551a6ee33e78b7fd40a86", "273dd35f5239"}, 0x1b, 0x3) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) [ 366.884174] binder: 19185:19200 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:15 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20200, 0x40) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f00000000c0)) r1 = getpid() r2 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) accept(r2, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000580)="8b480a5252afb33127d9c2678e3d5485834b69457ad852d4657254001a5246eb9358d1efeab26a2f03344e00408382b4653ebdc90f2b3e6c6f5fa09bcf8de36fa4d4eb4ba27b3d286da79aed2c544577a256f42f292782657962ca55ab4f04b0a45d52a48226920f7c5aa534dcab802319f1aae2b217dd18aea4d58d9b5f87b9b2bd593ed3f84b91dcbdebad5e7c872126e18956c35a3e9fba732263ac86bf9f4e9360f76851366e744cfb3e245b7993fd78de5bae297a830adbab7f4ac6957b") socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) getuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000080)='./file0\x00', r1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x4, 0x20}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0xc020660b, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)) 14:21:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x40000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000100)={0xd, 0xdb19, {0x51, 0x100000001, 0x100000001, {0x800, 0x2}, {0x4}, @cond=[{0xaaf, 0x9, 0x6, 0x96d, 0x1f, 0x8000}, {0x4267, 0x20, 0x8000, 0x8, 0x4, 0x6}]}, {0x54, 0x7, 0x5, {0x5df, 0x8}, {0xfffffffffffffff9, 0x80}, @ramp={0x8, 0x0, {0xdcb5, 0x3, 0x200, 0x4}}}}) 14:21:15 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x2000000000000000, &(0x7f00000002c0)}) 14:21:15 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3, 0x480103) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000100)="c0c8650665a2cfe7fe7aa7988cfb07397551015ab7ddca4ee8ce4e269fb5a14964d7778666627f1a742ced4385a85fd261777f11cbfe758f9464e685c679f8be76374314072db9e7ed190b460ae45406d5d721c4bc2aa1511d632ea3c81d74068349518a9c7061aa451904c98131af39de99403854b3593dc5b7977bff6111b8", 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x9) msgget(0x3, 0x4a) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) 14:21:15 executing program 0: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) socketpair$inet_icmp_raw(0x2, 0x2c, 0x1, &(0x7f0000000100)) [ 367.105951] binder: 19226:19230 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x5, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e8, 0x0, 0x3e0, 0x1e0, 0x0, 0x3e0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, &(0x7f0000000100), {[{{@uncond, 0x0, 0xc8, 0xf0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x100000001, 0x1}}}, {{@ipv6={@empty, @ipv4={[], [], @broadcast}, [0x0, 0x0, 0xff, 0xff000000], [0xffffffff, 0x0, 0x0, 0xffffff00], 'veth1_to_team\x00', 'syz_tun\x00', {0xff}, {}, 0x3c, 0x7, 0x7, 0x1}, 0x0, 0xc8, 0xf0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@local, @empty, [0x0, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0x0, 0x0, 0xffffffff], 'bond0\x00', 'erspan0\x00', {}, {}, 0x6f, 0x2, 0x2, 0x2}, 0x0, 0xc8, 0x110}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@loopback, 0x19, 0x36, 0x542}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@local, @empty, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xff000000, 0xffffff00, 0xff], 'bridge_slave_1\x00', 'veth0\x00', {0xff}, {0xff}, 0x0, 0x3, 0x1, 0x38}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d3, 0x4d4, 0x3f, 0x100000001, 0x2}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x401, 0x6, 0xffff, 0x8001, 0x1, 0x9, 0x8]}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:16 executing program 1: syz_emit_ethernet(0x56, &(0x7f0000000000)={@empty, @dev, [], {@canfd={0xd, {{0x1, 0x2, 0x7a, 0x1f}, 0x26, 0x1, 0x0, 0x0, "b3d15d53c4884a36acfebd1fb00864ef861f234a9cac444c63a1fb2273c67746f0bb4634c2808e9a68aeb339545d1b2a68deb8cb5636feff1903c20b95d2437e"}}}}, 0x0) 14:21:16 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x60e40100, &(0x7f00000002c0)}) 14:21:16 executing program 2: setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0x7d}, 0x28, 0x3) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) 14:21:16 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x5, &(0x7f0000000140)={r0}, 0x10) 14:21:16 executing program 0: unshare(0x400) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r0, &(0x7f0000000040)=""/182, 0x3e) 14:21:16 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x84002) write(r1, &(0x7f0000000140)="e6e50601ae61a922af2dc8007f6793889b3ab17614d4e0b4265f5214", 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r3 = dup3(r2, r2, 0x80000) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0xfffffffffffff086) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000280)={0x9, 0xbff, 0xfc, 'queue0\x00', 0x9}) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f00000000c0)={0x3, 0x77, &(0x7f0000000000)="8b717acb4e42af79a629b713e6c5bd3dadadb601979a7b5d3b6b0233c518a8eeafc1318671c1c829a877eae02d513a7c3f7d9c0b0a78ba7c330ba8e4d145175daa51d3eb86daf3b6dbd31e555dc4be6ab714089035a05abb9ec496a4605cfde789030881cd58fe80d73726c5376c66aa148ba1068dff96"}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f0000000340)={0x3f, 0x5b6, 0x1f}) ptrace$setsig(0x4203, r0, 0x4, &(0x7f0000000240)={0x7, 0x4, 0x400, 0x3}) accept(r2, &(0x7f0000000180)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:16 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='procvmnet1\x00'}, 0x10) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0x9) 14:21:16 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) [ 367.797688] binder: 19264:19271 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:16 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = fcntl$getown(r0, 0x9) kcmp(r1, r2, 0x1, r0, r0) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x1, 0x101200) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000100)={0x6, 0x3, 0x2}) r4 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8351, 0x400) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000080)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0xc0045878, 0x0) 14:21:16 executing program 0: unshare(0x400) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r0, &(0x7f0000000040)=""/182, 0x3e) 14:21:16 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x420002, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes128, 0x2, "95c0b2758549d814"}) 14:21:16 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x3000000, &(0x7f00000002c0)}) 14:21:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x27c, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000980)=[@text64={0x40, &(0x7f00000008c0)="c421e573fd00c744240000800000c7442402b8000000c7442406000000000f011424420fc72bc744240094000000c74424023d870000ff2c24440f20c0350c000000440f22c0663666660f3a639b0400000000b982020000b800500000ba000000000f3066baa100ecc7442400f5921eadc744240200000000c7442406000000000f01142466410f3882991838d33e", 0x8f}], 0x1, 0x0, &(0x7f00000009c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x861) recvmsg(r3, &(0x7f0000000780)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000100)}, {&(0x7f0000000440)=""/207, 0xcf}, {&(0x7f0000000140)=""/7, 0x7}, {&(0x7f0000000200)=""/10, 0xa}, {&(0x7f00000002c0)=""/141, 0x8d}, {&(0x7f0000000540)=""/192, 0xc0}, {&(0x7f0000000600)=""/234, 0xea}], 0x7, &(0x7f0000000240)=""/60, 0x3c, 0x4000000000000}, 0x20) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f00000007c0)) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000000c0)) [ 367.956128] binder: 19291:19297 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:16 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 14:21:16 executing program 0: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000200)={0x14}, 0x14) getpid() r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r0, 0x88, 0x1, &(0x7f0000000000)="ea4c3acb", 0x4) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:21:16 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x3006, &(0x7f00000002c0)}) 14:21:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000040)={0x81, 0xa0, 0x100000000}) prctl$intptr(0x1a, 0xffffffff) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x2b0e, 0x121000) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000000000000a004e20080000000000000000000000000000000000000103000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7e00cced83666af971f354896b119860a0882b9574ac73a5f69c66c01cbf93e3d2d3ac3d87af2f5b7301c50d21814082c2af2e93f91c66f15290e1cc75f4b8232ed8c651510c48a633282c97b691dbca2b7bcee79"], 0x90) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) [ 368.111104] binder: 19310:19315 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:17 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x202, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000080)={{0x5, 0x7}, 'port0\x00', 0x80, 0x4, 0x3, 0x2, 0x57, 0x2, 0x5, 0x0, 0xfff3e2fc2468cb99, 0x1}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) 14:21:17 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0xc, &(0x7f0000000140)={r0}, 0x10) 14:21:17 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 14:21:17 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000240)={0x0, 0xe7, &(0x7f0000000100)="89cf8d3d739d0c3ce767c6d94ca1cc6e22d11a8a7fcce373bb69092c19a01d5e78bcb2443c77b5b59c1775f87ba8b178acf7388c0936922073015942fc3a0c62db988a9e78acc5d1c77bbc2c679d702c16d32f8ef3d7d44492419f539230f638800355efe5a8d2988ff8dc71fdf6ea813c3566e5b1a14e4150603a8747432c31cee90d5d18d5c4a910397980f7e314ddaa86fc3a06049c888b9f306fb850ed428626ffdd88695ff38bacf7bc39b48c39c4ab056a18b22360fbf545534a8ded56eea7e19f1b17d6bb7d71bfb2fcd059057ffffcdbc799d30feebf0d7478ef39532d10c19e14be7a"}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000040)=0x7, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080), 0x80800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) 14:21:17 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=r2) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000580)={{0x7, 0x2, 0x0, 0x3181, 'syz1\x00', 0xa3}, 0x0, [0x6, 0x3, 0xa4f, 0x2, 0x7, 0x8, 0xdb, 0x6, 0x9, 0x0, 0x3, 0xb70c, 0x0, 0x7, 0x5, 0xffffffff, 0x3, 0x80000000, 0x2, 0x9, 0xacae, 0x1, 0xfff, 0xffff, 0x10001, 0x3, 0x6, 0x0, 0xfffffffffffffffc, 0x80000001, 0x7, 0x7fff, 0x4, 0x3, 0x5, 0x9bb8, 0x80000000, 0x5, 0x1, 0x6, 0x10001, 0x3, 0x5, 0x2, 0xfeb3, 0x4, 0x5, 0x6, 0x5, 0x79, 0x9, 0xffffffffffffff80, 0xfffffffffffffff9, 0x0, 0x80000000, 0x7, 0xf44, 0x5, 0x10001, 0x7, 0x2, 0x3, 0x3, 0x23, 0x200, 0xffff, 0x7f, 0xb84, 0x800, 0x80000000, 0x401, 0x2, 0xffffffff80000001, 0x9, 0x3, 0x9, 0x9, 0x1000, 0x34, 0x7, 0x4c6, 0x100000000, 0xfffffffffffffffa, 0x8, 0xfffffffffffff001, 0xa343, 0x8, 0xdfcb, 0x7, 0x3, 0x5, 0x2, 0xf34, 0xbc, 0x8, 0x20, 0x6, 0x0, 0xfffffffffffffffd, 0x8, 0xcd, 0x101, 0xfffffffffffffff7, 0x9, 0x8001, 0x0, 0xffffffff, 0xfff, 0x9, 0xffffffffffff45f9, 0x3f, 0x7, 0x2a, 0x1ff, 0x10000, 0x4, 0x1, 0xdce, 0x7, 0x0, 0x4, 0x4, 0x1000, 0x6, 0x6, 0x0, 0x4, 0x4], {0x0, 0x989680}}) 14:21:17 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={r0}, 0x10) 14:21:17 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x6000, &(0x7f00000002c0)}) 14:21:17 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) [ 368.399664] binder: 19343:19347 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, r1) 14:21:17 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) getpeername(r0, &(0x7f0000000040)=@sco, &(0x7f0000000100)=0x80) 14:21:17 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x6c, &(0x7f00000002c0)}) 14:21:17 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 14:21:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x80, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, r1) 14:21:17 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000240)={'ipvs\x00'}, &(0x7f0000000280)=0x1e) sched_setscheduler(r0, 0x3, &(0x7f0000000200)=0x10000) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) r3 = getuid() getgroups(0x6, &(0x7f00000000c0)=[0xee00, 0x0, 0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}]}}) 14:21:17 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x20000004, &(0x7f0000000140)={r0}, 0x10) 14:21:17 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080), 0x80800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) 14:21:17 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x13, &(0x7f0000000140)={r0}, 0x10) 14:21:17 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000000)) syz_open_dev$sndctrl(&(0x7f00000002c0)='/dev/snd/controlC#\x00', 0x0, 0x28802) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x2) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x200000, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000240)=0x6, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r3 = accept(r1, &(0x7f0000000400)=@nl=@unspec, &(0x7f0000000480)=0xffffffffffffff46) write$binfmt_elf32(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="7f45444607410903030000000000000002000600fdffffffd303000038000000470000000900000007002000fdff3e000300810000000100020000004b000000040000000300000012ffffff6d000000f7ff00000600000053e574640080001f0c01000000100000ff0f0000090000008817e08ff562757034e20d72bbfb02b53f788f55c91fce9e2dc7f4c88333e00b3c2e000000000000000000000000"], 0x9e) 14:21:17 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x81, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0xfffffffffffffffd, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) 14:21:17 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x700, &(0x7f00000002c0)}) 14:21:17 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 14:21:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) sched_getaffinity(0x0, 0x8, &(0x7f00000001c0)) pipe(&(0x7f0000000580)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) 14:21:18 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x7, &(0x7f00000002c0)}) 14:21:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x402800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f, 0xc9facc2dd68d3d4a}}, 0x20) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'ip6gretap0\x00', 0x1}, 0x18) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:18 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:18 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 14:21:18 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x60e4010000000000, &(0x7f00000002c0)}) 14:21:18 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x800, 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f00000002c0)={{0x6, 0x80000001}, {}, 0x0, 0x2, 0x7}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x200102, 0x0) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000240)={'veth0_to_team\x00', 0x5}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r3, r4}}, 0x2f0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)=0x7) fcntl$setflags(r0, 0x2, 0x1) membarrier(0x20, 0x0) 14:21:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7, 0x12, 0x1d, 0x10, "9bdf1639fc5dd76f991579f027e33282dbc403a02a0c274fcca1714ffdc0005c401a26f623157c4523efb3f20ae8f2b2c6f1cfdf365542021d782ebbbca73155", "2cd932454c0f36545da7bece61f00e1fe93fccd361d65c1557a869afcb69ffac", [0x1, 0x5]}) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:18 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 14:21:18 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0xffffff7f, &(0x7f00000002c0)}) 14:21:18 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x7, &(0x7f0000000140)={r0}, 0x10) 14:21:18 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:18 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 14:21:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x8, &(0x7f0000001700)=[{&(0x7f00000000c0)="6496a51b12921f28c84dd3eb1dd25143f1d5aaab0da342f42c4017a119fba01660083757901770ff670d0c44defe981b8f050e3aa3a1909902e0b8b898e33e444141a717e5bce1e212507cb6288a848de6309f76be26e9a65787a4e23f363b46dde26627e124bbe371f8b81fa772d800f1c0c62a020a28ff0368f5bdf84b0260efe5cd52826103570023b9c18f33083b744e", 0x92, 0x6}, {&(0x7f0000000200)="402867920d2a68346832096d144940d6054cd8da9ac52f8b3c3dc90853da69664b2aba88f92232fb811be79afe74c5bdbeb656c7a1cf37c75173f4ae954297b51211fee803188e5bc07271c42718bf85da740c948b2f665ed6a4b6f7613eb3c5ddd1d3416d06554731be42c81211986b479ae15ce606a0fdc24cd8b4610beb2ba882e3985d7055a042ddbcb52ba87f9242433899", 0x94, 0xffff}, {&(0x7f00000002c0)="1627c13c9f6a37b52ab8c3028261a86ea361503d4c82b9092e65b74f70f313509af0f546bb47558a193ff217aab178d7bcbc51c7bfda46324d62fcdc2a14c1bb9ab0f156c56d803a00f26027e817b5652f2f9cfded1ddf", 0x57}, {&(0x7f0000000340)="c15c3cab95d3f1825ddbae56b41fbfbce46d1cac0bdd2ba5fbf20112706004644bd1b028561001aab04a34daa87b6421fc8b2e9e6d067536e2d7c6c4a34b7fdbe8f7fe8fecb4e1cbd30cc4beeaba5b5ce6605b346795496640eb2091bc177d1aa3191e0836b1b4a751e09b66babb7e638458524cd2ae1c9da6a244636b9fd927f1937b1144bd4502c61c5be67dd29991a18b353e6a7d01699b84f3df09e5483e9b19d05ef82013a0e7d38bedd21f393d7c83b4b5eb4ce594655017a9d6b5f4af20e1d3d8307461b00f0d9b93fb5d6b82853379623dc831d91aa6", 0xda, 0x6}, {&(0x7f0000000580)="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", 0x1000, 0x7}, {&(0x7f0000000440)="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", 0xfc, 0x1}, {&(0x7f0000001580)="46b1b8537a66e0bd581b283e4cab640932cfef812897020b7a08ca343b5c0aacacf15bdc9f8411e854a5e370314d55e1e7b9bad182aa9085613f52f7dad4a8e5bd37d4f7a24781a3306cbc9435312a6aa50e3f56c190e67b02559bfae85172a91946908e3bcc7a75fcd06c82059aa1cae3eccf847b5b518e764c54527359c3f874bdb57b10e26d296a213dffc035ed7314882ee01c753f2b40dceb6cb98c", 0x9e, 0x2}, {&(0x7f0000001640)="0b0d20d1d7c86c74fd6528a0ef75e466f5aba4587edaf80078cff5e2d8c6744840a9c855f7c58249906adf4186703514528ba63cc2de6c798e96f01a6f4dc5efe2ff5fc0747c334bf5052aacbf45a48345755c060488792be64d42ac938f267b423c007ecc83079ddba02fdc7c79e9e0fe0e945b3999813a6300a6be6af3eaefdb8e22380a855b49aa4a390683b748292cae74e1e0992326e3c348187a6b239eaa29a2483ef39e3705", 0xa9, 0x9}], 0x800000, &(0x7f00000017c0)='/dev/loop-control\x00') r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001840)='/dev/loop-control\x00', 0xfffffffffffffffc, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001800)='/dev/full\x00', 0xfdba402e06d5bbce, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000001880)) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, r2) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000001800)) 14:21:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x0, 0x6bc34511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 14:21:18 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x4c00, &(0x7f00000002c0)}) 14:21:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) sched_getaffinity(0x0, 0x8, &(0x7f00000001c0)) pipe(&(0x7f0000000580)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:18 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:18 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) [ 369.673539] QAT: Invalid ioctl 14:21:18 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x141900, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="440000000100000002000000551b07bfd2de2d03508f5d612f92407604dfa371147e25729931ec880339cadbbe1e909a4f34579a7153cfe3e6b1a914fa22eab7e5920000000000000008000000000000"]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)="7b601b776c616e302a7d00"}, 0x10) r3 = add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)="70f101c65804", 0x6, 0xfffffffffffffffe) keyctl$update(0x2, r3, &(0x7f0000000440)="e61c27390dd4bdda2cf2c4ba8bcdc0042fda25c252710f9b63b567bd96667becde6399e6fb01818a75fd19085af785369b9e46c9c368d76d1021ff54c75fe3d2b652548f22de079b315007c0ad5380cc3ca2a923ca3f1b604dc6e31013db3f520e499ea4e9d6cb258a2b9e1611b31c4b9e84b15b65c300aa4745614822d6731a6550d5ba0425f97f28b7b806a85e77802290b0d5d36315ada1067dd198ed430dfdd9b8a4d17684d66e857386362d840bde696165866759303062868acb", 0x3be) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000400)=r2) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) [ 369.704185] binder_thread_write: 16 callbacks suppressed [ 369.704197] binder: 19483:19494 BC_FREE_BUFFER u0000000000000000 no match 14:21:18 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x2, &(0x7f00000002c0)}) [ 369.746524] QAT: Invalid ioctl 14:21:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3, 0x10801) write$P9_RREADLINK(r0, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) 14:21:18 executing program 1: perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105518, &(0x7f0000001000)) 14:21:18 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3db0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x3) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) [ 369.855891] binder: 19508:19511 BC_FREE_BUFFER u0000000000000000 no match 14:21:18 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x500000000000000, &(0x7f00000002c0)}) 14:21:18 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x8, &(0x7f0000000140)={r0}, 0x10) 14:21:18 executing program 1: perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105518, &(0x7f0000001000)) 14:21:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000580)={{0x9, 0x3, 0x80010000000000, 0x9, '\x00', 0x7f}, 0x0, [0x5, 0x5, 0x6, 0x2, 0x4ad8, 0x0, 0x3, 0xde59, 0x2, 0x81, 0x4, 0x3f, 0x1, 0x6, 0x1, 0x2, 0x20, 0x20, 0xfffffffffffffffb, 0xffffffff, 0x8, 0x3, 0xfffffffffffffffd, 0x5, 0x93d, 0x4, 0x1, 0x6, 0x8, 0x3b06, 0xa750, 0x81c, 0x8, 0x1ff, 0x10000, 0x1, 0x10001, 0xd, 0x8000, 0x5, 0x37f, 0x1, 0x1000, 0x47, 0x1, 0x3, 0xfffffffffffffff9, 0xc10b0, 0x1, 0x8, 0x6dec0726, 0x80000000, 0x4, 0x0, 0xf03, 0x2, 0xce4, 0x3, 0x401, 0x5, 0x1ff, 0x22ead436, 0x800, 0x4, 0x7a, 0x0, 0x83f, 0x4, 0x6427, 0x6, 0x7fffffff, 0x1, 0xb57, 0x8, 0x7, 0x101, 0x5, 0x4, 0x5726, 0x5, 0xdb9, 0x1000, 0xfffffffffffffff8, 0x80000000, 0x8, 0x8, 0x8, 0x6, 0x80, 0x0, 0x4, 0x4, 0x9, 0x2, 0x1ff, 0x7, 0x5, 0x81, 0xffffffff, 0x1, 0x3ba, 0xfffffffffffffffc, 0x5, 0xe54, 0x8, 0x7fff, 0x3f, 0x1, 0xd4, 0xaae, 0x3, 0x8, 0x1, 0x4, 0x1, 0x9, 0x352, 0x7fff, 0x8, 0x4, 0x3, 0x4, 0x2, 0x2, 0x7, 0x4, 0x4, 0x1], {r2, r3+10000000}}) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000a80)="ad249652c1f984fd02f766ee661b6aa7a6be6e0add4b1285c923974252247b547f9781ce3ba9b5d5a6894b0a3bcf5ae421e14b5d1697eb5774e90c5294046a27a693b7c7a1b57c5b3bd182f282c952b060fc19a10b6e02be37c47b6c01d48e04d606b6817d1ae846cc6b50f13a7126829b15c9f402ad63ec06a655288108a7aa1e5ebbf8b8fba58ca846d39e32bd68bfdac01533b1979e470af9867bf623701853fde2dc71bdbd12c4e9834dabe43924cdfef8722c8321cd89012ad700fd5caaf5820dd0494f3b4bf1f0315aefdc251dcf9f7d00fd31527d34bb7a5fdff754d97e1f0a88d7d110316cabe9c1fdfbb6424042472f91ded785cc177c8bbaa405cca8dc1d102c3b49a8d5db13aa552bb98f323fe83f14acfc8f08afe1c4492db205c9a4e895f619c050b26b602db0de10ff8d8ad86e01f136d83c2d4c7f226b3354bc0e6d79174bac4488b4846e2dd2adeb4d41ef0a8a3c56c36a512751eb331f5bd85f37149c485a31d985f7d802c87386e2b080714af2ce319a57398bb87850eac35bc905abfb86325d5fe11cb0e84e3cebb089d5d4b04c3f32376d128c17d5274c27a72aa6f08d9772f440f31f3db480ae008e671577c391e88ce9104c552e9151ac3036f7d985d85ab619bb0364bcb04bb8bc4fa164b171db78cd53c739c2520b9c8cc7cf9ef2d32e71aef865f4fa637980582f46988275546775f4f36795322e0d42979c2823a06714dfa55fb1ccf06610c1c31db37fde94b64cf2288cc35a47c6cca5238e41d8bce8152f4b222d52a99b0ca1f46efaa943d371b43f4aa388648272264c0fc53891479043a723d8cc9682ff85f52b9f232797c96d876b1d5a10e494b0030e3a58bbd13f8e6d55dbc519466a145faece235470c84afd7e1cf31d647ebc1bffc775bbe561745b125d71cb0eb8e09d9652fb1c6ab176211a0ff4cfa3782a8a510c8710b52aefdbdfc7352466c8b399a9afc45cee6042c8ad418b8764820c82febe90fc387e248272d8caa71aa133e45ac68b7eb0de9bc4ab0edb0f07b1744a47f15ab8ae16ff102ff99c1320d03e5e6de6fdcdb5eca51cd50d4e615c5ccaed03ab465fd7b421d82d8b6231277f6e1abdf6ada191ece0a2bc5cc17273e10a1259ff70cec5103ccf4daa92fac4c6cad7750c76933747f4269ffcac71b424e472049f66552c956eb0f68de4cbabb20305249591500dd34be8adf081a8b3922bc13fd374fe3a421f9941fb509af824a95dff9d43089c9589bc1f5aa46901db602d20ff818fb49d78280d7da97df6d27fae51d803a2086583e08f661a803888cf2c49dadbafa0d8df49ce065d36bead0267e01577d838061523fb3aa0955b7a64fcf3da894a53c6630a3b34243b07d6cdfe503058e735c4369cd25c9b2571204c2e6b8d24ea60cd8f8313e7fa8b98dd86259786239125c0a316e65745c4bb4b772feb0459f10da80ce2d056bb4eefc37242b19493d349e8017707bedc0f625d76489f955063ba4df0455f6da8792fc3826fc4cadae99c19d776919fb52f878b9569ca483be84230ade92003762ccae46a7cf57af4ceca2188d64529bcf10d424e2b29c4fca630b232fdb49e56916a76b0df411d682a4b2d6aac5c9c4217679e47389fd85a2b1dcce1ace971044076a3d0cf27ca42550069ddc3cb96e22cef1d1e8f738a694b334c0da7b85bfc9c7fbe7efacb6d0272790e604a67291641cb6fb111a139d14818c6736bfec153e6ff70da12ca172ff9129dc3e2272f5288b9c3f2cdc6c5eb3e49aa1f48fa4428aadd51bde28067a98e9cd6eeaa9308b69d04c367d8311e96d8bc159c82de1b7bab8c6fe420dfb06047525071b9245cdd20d1fc4570014291cb516d6a7450d166f7b09542d10e2a14014256119b533b7caf2aa30eca601f8289ff9c29076f2eb3d6ffc5ea034fc715f0d4e74c83f76e65d38995d16e273cdacb82ecf9b561a85be4717c5d0c21d6658e931055ef5a7510ca72758909dfb1ec2d3b88fcb756ef9606dd3176bd45156c917312f281a896e3b9645b16d56e8e1f6fea6f19d451b0618ddef322432405da771e7f34bb983904b02fab80bdce406b3db598a8a245b7c30f6675ccb1aee4416ddea28293c5a22b55c2609dfa114ba6e3978bc6d15fd1ac485a397144a6c968f3a3cd8aaeaf14c46032ad7e06bd5c164a677b20bcb1f03e754b062a48eda8f7cfded13898bd7eb1d725f06bd7fb68fab40eb65badee4897e4f79ffa96a1592ac78f880a3cd1ebf6d717fcc4ad5e321575ced2d925834ec7148cb1c8a55084b0a84aa3b30f5eb4f26e2177f4d607a8b92399e1ca1dd9b3bd5597fcd88302bb1023b4846401743eb7bd42e8c4fca2723a20db8356b55c02ef408ef5e54ed3b99a894712fe8e570b1f1d92739a400680fdaec120fc13841fc3ad9dcfd70c4f635cea9072455ffd0ea16ed02c1f4b0720ac0a2a517de859efcb6f27df8bc1db366ab76b1f44043e87ce2aaeadad6b8a09105f3abf4e6c04cae2a2f8922fc5c454a0a74d754f916741fd9c6679c8e5ce10159c3fb0754209acb1441fb0a84974c0ce8f59c8c587e6c7320ae4fc17cc81bef11095523c365a1065b147ff0335ef2a620d51d29882dc40d050a8e96cc05c8c977471afd10580f995d429d4df451408c1b14cbc7c6c2d3aebcbd7f489fac4e75c6dbde626912bd9607fdd0598d48668f00b740a9aee79b6d38f51dd6dd9c5948661911ef8b4d2da35685384b9d327b7737c76ed1eaaf0d8b11ae39dbf456d56429a25701a6dbc0ae21fe37c76e9081c71d2960ea3f382eaf24c436f3dff482a2fdfd68a28a70758f213eb2d3941226daf3f1b7f40d75e69ba3de5b0e96a72c864a63f68d69af4d58eac5b246bf281f69a83722c40f702e78447fd0f689e54e4c38b166649a142c8cfdb9088bceceaa887331c736b0d7c0e5ce1f09f6e7789e0fd8328016a0b3ea9d7987fb1aec6b0c32ccfb217e502d986652811e5fa1581950ef99917a3f85389892a8a1a2e128ac57f3b41fb5e8119455ac881a7db9da12b53282c6c792d5d6caf36d2023c76a3bbb63b3ff57fe310ddb0857048dd933c811cfec2cfb78937109acb2e4b730e33ef5b16ea9c5bc9a0c8b14c65173118063c2c424e5013a2f8b7ed3ecbac4310ca1eff8c3ed8807822af790396d8527e92c1400ab3612b7ca6403f89491bf240ba584de3633b8b9de5bf1635fbb029dbb35c8d8ac271359cda4eaa4833caffbc230d51abb93ef62da613f3201ff66471727ea55ca46e3fc416c5952116d51bb701b1ce54fd5cc546afe337a008afd4c30d96b3b1849a5cc4fc477d83c07b6049aef49768a36c06a9930dd385462c1d38cfc122668e0083eacdbc285ebb40aabf6a223c5b6fe8a90a395025efa452fffc239f62bfebb63e682dca8a79782af14f5e70bbacf0f2f35ff58f769433eacebe3594cc4b8e7c2cdaf4758ef885747eccbd9e8f6ed05a5293c9076142b49b0cd09acb64cdc5bba1dcc3359cdb21445c4621c7ee78fecbbc40dce382c53254a607f7268cbc736469ac52822e56092eacd9e783cdb4144e4fa4337acf9166b6f4b7d441badf025cef5e771b2769b9b583509227d90378e11b25758c688de6f2106d1366a8761cd3abb3388832d79d96e06c8de4513c6b4762c2af0912d89053d463e13090a5de2603cd9fa2f622cd41f0f730bcd6ce31c472ba2eb6856234a9e5d311129bd7d17907fa7f21b92fa9b11f9e2f6a449493cef886d25103266d23deffa32dad52c2b889ebd3092bb578603fe9a5aad37e3357c4bb768aab7a19e6a17a305cf4e3ae5afd3208cc28f645e2b07e8262647e63747f05605a9da0dd7f89ff62cc9828857352a51c5332eb5de3ae96951a06a5c8233cbb221dfd1e82fde2fd7275f01ae578f81aac8b1a55c76fcb4ac3ae62cbb2f348798902089e9fe7c1e85a03828f84ccd786b5cd45fedddac427a73057a57b5e258f2629678c80ebce8a8dbf6927548b8414dd62ca34392902da8b12f3e64f9d4bce62b18cc9afef14732ecdee049d97c40802ee925bf383948fbc2f13f4e06ac3e88db5d7f2d3f71ca353be47994066614c08d8ffb82c346609e163be5415c7a7ae0e7342d9260e22921dd4c7e903d3930e4c68721afb89dbe0b07182abaf88ff39cf0aa934644d244d80585c57198f1cc003f30e6cf57a304f6fc7c59750b4049140dc516f23621a8040a4c9f27fe75e4cc189b859e0883ef3229e2707102f7e8cf64243d63d5cdfd136f7d9f25c078c6a85ac977648734d406d2d22e00dd9d7edaa231f4e3f952e01df8ffaf047decd3cef18fb8d121eb47f87e97153ead660a18e1610fa9ae9aa5ff20bfd1d601d3ae8c5c30489d1dc32ef527b3868f210cc60f76027fd89e031fa0017cf674bb9499d50900795f75bc9fbf6fb820353ed3cf782d280f912e83a68d0760f1650d0c83b03b41f91a75648afcb2cc2c07b5b8cd6d87166e5ab3da1796f89dadb27c17adf36404adf6f067bb0766e103330659543175f40036ed0edbd10401760d1b2559edcc62d76755544550a56278d1c8b494b7788564316da4e41620a9f961157af83b3fa0cfb2042014aeb84395cc1776e319ec5af267cbf87e121cff1eac09a1b519522f8bc377d46857c09760d4a21c202f53127b05deaee7d9d6111d03b0b0be0bad2196530f014b063430e5d64c6e42e968db8d80d9c1e164c1f12f7c63c7c7cf5c0026ddd48804079f9b1c5419dd85d06c3e28786b4daa46442961de0eb2a78eb12b5ee6d542af5a862e3815b9332d3a0592fa77cb94423ff788b06cf2a73f1c5c8d05dd3d610e298281b8b74765fef646b419f7c75e1d56e3454164cff6f6939a3a5a00fae172d8c637029787390dc90c20af9cf8479a97d6572aecaf56d9732aabb34860260a9ec2435f8cb959be354b4b8006e92f8981351ef67f47ed85224774182777de42fa5215eb55db805bef7f5d3320a43d41e1eb36d3d2f5585ba9911dfabb0579f3853a37aa072bfd4ea5c3e565d0a5bcac7ddd8608f9c66e1c6f5039e1c2b8d3a5e4562f961853f9c4bbd0c413cc84b7054552c368d44c313a5b74fe699604c9040b57427232745c872bf389740cabd19b63853eb0ecdcd085e099d392afbd4f547d28622a4f6b7d9d59b0b61f4849b560a84a2532b6028cf22ec9ce742c53139cb0d71cb75dc2fcc0208d6c26a467e3502ee95457ca8ae5f24b269f5137cae653351a69d4727185f67c961a02e8041a818455bcbbbe2c211e16d98580155988070a5ff68c69b06edf06ab2a3cd1cc16b3020fc3a85c893d09f9874456057b641c4c5d5126ac38054b0c38a5decbf19f753b97ffc8677d8973cff41d5433985f34b8c2fe69ea2c5989d1ada144e7c9d14b0796b044c53c85eb0b189b5cbb24fb0d51d05667d1be6b1594e4b46b5f779ce9c68e4f80ab935c34f46c908627ec9955cd98e89f704b3f4b16b67766258e82eb110a65ee7bd42965e95b7f5cebd104296bfaf60362f8fcffd90304e9615e95192a9e3575eaf029893a7b57192e4984bb94d9200b7f2445665afa474f4dee34785eb1f6992b258acc1c30a449fb3c6bfaffca05b861a800b65e894f07cc75652ca76e7c37d3351914b7a7f500d83ab36517b28dd264e1596b23a9d3fd5bb99bc80e8300638f00ff8b3b83a0f77a42ca403583c87affc2782350bd913c1d5398caff91aec5e6933e98e53692a6c9ad74683b729a875fa07b528ff093ba4c8b22f71b0ffddb094105dca48d50e9b50dc4601d5ae63d0e2eeabb3646a8a") write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0x7}, 0x2) 14:21:18 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x10001, 0x200000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000010}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4004002}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x12000, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') 14:21:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) sched_getaffinity(0x0, 0x8, &(0x7f00000001c0)) pipe(&(0x7f0000000580)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:18 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) [ 370.009946] binder: 19528:19532 BC_FREE_BUFFER u0000000000000000 no match [ 370.032663] binder: 19528:19532 BC_FREE_BUFFER u0000000000000000 no match [ 370.110720] QAT: Invalid ioctl 14:21:18 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x6c00000000000000, &(0x7f00000002c0)}) [ 370.135012] QAT: Invalid ioctl 14:21:19 executing program 1: perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105518, &(0x7f0000001000)) 14:21:19 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:19 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000140)={r0}, 0x10) [ 370.176003] QAT: Invalid ioctl [ 370.183666] QAT: Invalid ioctl 14:21:19 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x477e2997, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x221000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x8000) socket$inet6(0xa, 0x1000000000002, 0x3) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000380)) 14:21:19 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(r0, 0x3, 0x3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xa9b4, 0xfffffffffffffffe, 0x1, 0xaba3, 0x0, 0x1f, 0x8, 0x1, 0x9, 0x3, 0x100, 0x9, 0x1, 0x1, 0x1, 0x7ff, 0x401, 0xffffffffffffffff, 0x8, 0x0, 0x7541dc7a, 0x33, 0x5e17, 0x3, 0xffffffff, 0x83e, 0xffffffffffffb8b3, 0x9, 0x101, 0x4, 0x981a, 0x2, 0x1000, 0x8, 0x8, 0x500000000, 0x0, 0x80, 0x4, @perf_config_ext={0x0, 0x4}, 0x40, 0x1, 0x2, 0x7, 0xf171, 0x7f, 0x4}, r2, 0xb, r0, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) ptrace$getenv(0x4201, r2, 0x7fffffff, &(0x7f00000000c0)) [ 370.248686] binder: 19561:19567 BC_FREE_BUFFER u0000000000000000 no match 14:21:19 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 14:21:19 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x20000000, &(0x7f00000002c0)}) 14:21:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) splice(r0, &(0x7f0000000040), r0, &(0x7f0000000080), 0x3, 0xb) 14:21:19 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 14:21:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) sched_getaffinity(0x0, 0x8, &(0x7f00000001c0)) pipe(&(0x7f0000000580)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) [ 370.441556] binder: 19594:19597 BC_FREE_BUFFER u0000000000000000 no match 14:21:19 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xd1, 0x40000) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x0, 0x0) pipe2(&(0x7f0000000040), 0x84000) socket(0x18, 0x4, 0x9b3) socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)=0x1) 14:21:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) 14:21:19 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000015c0)=[@in6={0xa, 0x4e20, 0x529, @mcast1}], 0x1c) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:19 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 14:21:19 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x4106, &(0x7f00000002c0)}) 14:21:19 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x33, 0x4000) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x8000000000000f7) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101000, 0x0) write$P9_RCREATE(r2, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x30, 0x1, 0x5}, 0x3}}, 0x18) 14:21:19 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x100, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)=0x1) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x33}, 0x28, 0x2) 14:21:19 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0xf, &(0x7f0000000140)={r0}, 0x10) 14:21:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) sched_getaffinity(0x0, 0x8, &(0x7f00000001c0)) pipe(&(0x7f0000000580)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:19 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) sched_getaffinity(0x0, 0x8, &(0x7f00000001c0)) pipe(&(0x7f0000000580)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) [ 370.735269] binder: 19626:19637 BC_FREE_BUFFER u0000000000000000 no match 14:21:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), 0x2) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000080)) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, r3) 14:21:19 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 14:21:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) sched_getaffinity(0x0, 0x8, &(0x7f00000001c0)) pipe(&(0x7f0000000580)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:19 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x7000000, &(0x7f00000002c0)}) 14:21:19 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4181, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000200)=""/217) 14:21:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) sched_getaffinity(0x0, 0x8, &(0x7f00000001c0)) pipe(&(0x7f0000000580)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:19 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) [ 370.978876] binder_thread_write: 14 callbacks suppressed [ 370.978889] binder: 19668:19671 BC_ACQUIRE_DONE u0000000000000000 no match [ 371.020300] binder: 19668:19671 BC_FREE_BUFFER u0000000000000000 no match 14:21:19 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x6, 0x210000) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x6, 0x9, 0x4}}, 0x30) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200002, 0x0) write$FUSE_LK(r3, &(0x7f0000000040)={0x28, 0xfffffffffffffffe, 0x8, {{0x101, 0xfffffffffffffffb, 0x0, r0}}}, 0x28) bind$bt_rfcomm(r1, &(0x7f00000002c0)={0x1f, {0x7, 0x7, 0x80000000, 0x100000001, 0x9, 0x1}, 0x4}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x0, {0xa, 0x4e24, 0x1f, @mcast1, 0x9}, r4}}, 0x38) accept(r2, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x74c0, 0x200000) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000000c0)={0x0, 0xfffffffffffffffb, 0x1, &(0x7f0000000080)=0x1}) 14:21:19 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rfkill\x00', 0x40000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000100)={0x0}) r4 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000008, 0x100010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x9c, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x30, 0x10, &(0x7f0000000140)=[@flat={0x73622a85, 0xa, r2, 0x4}, @flat={0x73682a85, 0xa, r3}], &(0x7f0000000200)=[0x0, 0x48]}}, @release, @clear_death={0x400c630f, 0x1, 0x1}, @increfs_done={0x40106308, r4, 0x3}, @enter_looper, @acquire_done={0x40106309, r5, 0x1}, @acquire_done={0x40106309, r6, 0x2}], 0x5, 0x0, &(0x7f0000000340)="aa9b6c6b84"}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 14:21:19 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x7400, &(0x7f00000002c0)}) 14:21:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) sched_getaffinity(0x0, 0x8, &(0x7f00000001c0)) pipe(&(0x7f0000000580)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:19 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:19 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 14:21:19 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:20 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x5, &(0x7f00000002c0)}) 14:21:20 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:20 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:20 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) [ 371.185989] binder: 19694:19704 BC_ACQUIRE_DONE u0000000000000000 no match [ 371.204696] binder: 19694:19704 BC_FREE_BUFFER u0000000000000000 no match 14:21:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x20200, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:20 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x2000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40004) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xb) [ 371.339383] binder: 19721:19723 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:20 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:20 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 14:21:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40, 0x482000) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x7fffffff, {{0x2, 0x4e20}}}, 0x88) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000200)) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x585802) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) 14:21:20 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @multicast2}, &(0x7f00000000c0)=0xb5) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() r2 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) accept(r2, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) [ 371.382958] binder: 19721:19723 BC_FREE_BUFFER u0000000000000000 no match 14:21:20 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xc8, 0x5, 0x7, 0x9, 0x4}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r1, &(0x7f0000000200)=0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000000c0)) 14:21:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) sched_getaffinity(0x0, 0x8, &(0x7f00000001c0)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:20 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0xffffff7f00000000, &(0x7f00000002c0)}) 14:21:20 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:20 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 14:21:20 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7646, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) pipe(&(0x7f0000000040)) 14:21:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={&(0x7f0000000040), 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x3, @loopback}]}}}]}, 0x48}}, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='\x00', r1}, 0x10) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0xc) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f00000000c0)) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x22400300}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_getnetconf={0x1c, 0x52, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x240040c4) 14:21:20 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r2 = accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0xffffff2a) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000)={r2}) 14:21:20 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) [ 371.719843] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 371.724289] binder: 19773:19784 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:20 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x100000000000000, &(0x7f00000002c0)}) 14:21:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) [ 371.788842] netlink: 'syz-executor5': attribute type 3 has an invalid length. 14:21:20 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 14:21:20 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:20 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 14:21:20 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x6, 0xf853, 0x80000000, 0x5, 0x0, 0x965e, 0x800, 0x1, 0x6, 0x100, 0x2, 0x9556, 0x6, 0x0, 0x1, 0x1, 0x0, 0x6, 0x80, 0x800000000000, 0xfffffffffffffffb, 0x7, 0x76c, 0x1, 0x9c, 0x6, 0x0, 0x3, 0x675, 0x3, 0x7f, 0x7fffffff, 0x3, 0x7fff, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x20, 0x5, 0x5, 0x5, 0x7, 0x9, 0x2}, r2, 0xf, r0, 0xa) [ 371.892837] binder: 19803:19806 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:20 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x4c00000000000000, &(0x7f00000002c0)}) 14:21:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:20 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40140, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 14:21:20 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:20 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 14:21:20 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) [ 372.044675] binder: 19823:19827 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:20 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x3006000000000000, &(0x7f00000002c0)}) 14:21:21 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r2 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @rand_addr}, &(0x7f0000000040)=0x10, 0x800) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @remote}, &(0x7f0000000100)=0xc) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={r3, @local}, 0xc) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x1) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x7fffffff) 14:21:21 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80a, 0x4) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000040)=""/22, &(0x7f0000000080)=0x16) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 14:21:21 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:21 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) getrlimit(0x0, &(0x7f0000000040)) 14:21:21 executing program 1: syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105518, &(0x7f0000001000)) 14:21:21 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) [ 372.225298] binder: 19847:19854 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:21 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x641, &(0x7f00000002c0)}) 14:21:21 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x5, 0x100000001, 0x400, 0x2, 0x0, 0x6, 0x41000, 0x8, 0x80000001, 0xfffffffffffffffd, 0x9, 0x8, 0xfff, 0xfffffffffffffff7, 0xe39, 0x8000, 0x20, 0x9, 0x5, 0x3, 0x3, 0x1713fff, 0x800, 0x0, 0x40000, 0x100000001, 0xffffffffffff356a, 0x100000, 0x4, 0x2, 0x9, 0x567, 0x1, 0x2, 0x1, 0xd5e, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x20, 0x157, 0x8000, 0x3, 0xffffffffffffffd7, 0x9, 0x10001}, r4, 0xe, r0, 0x8) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r5, 0x4010ae94, &(0x7f0000000300)={0x80, 0x4, 0x20}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x7, 0x0, 0xfff}) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r6, r1) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0xc0045878, 0x0) 14:21:21 executing program 1: syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105518, &(0x7f0000001000)) [ 372.369887] binder: 19876:19880 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:21 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x6, &(0x7f00000002c0)}) 14:21:21 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x802, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000200)={0x3, {{0x2, 0x4e24, @multicast1}}, 0x0, 0x9, [{{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e22}}, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e23}}, {{0x2, 0x4e23, @rand_addr=0x8}}]}, 0x510) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000000040)="b07e4c9684072b76159c2ea84a3ba1f19c883883f2940de791608638cbc276de2b027cd852380d24a081b1ae933c6a4f025ae2d116a253f9f7b756d7fbd1b2c24d607827991d242da76fcc69b969a571f79c7d433ae615bcd8e357f1fed71fa00705c8a85ae1548ee0aaddac2ec5df1eccc0a13e529a7df8e061", 0x7a, 0x44050, &(0x7f0000000100)={0xa, 0x4e20, 0x4, @local, 0x10000}, 0x1c) 14:21:21 executing program 1: syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105518, &(0x7f0000001000)) 14:21:21 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:21 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x7a000000, &(0x7f00000002c0)}) 14:21:21 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) [ 372.648817] binder: 19915:19917 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:21 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r2 = accept(r1, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000400)=0x80) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000000c0)={0x2, {{0xa, 0x4e22, 0xffffffff00000000, @loopback, 0x4}}, {{0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, [], 0x21}, 0x8000}}}, 0x108) 14:21:21 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:21 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x18e10100, &(0x7f00000002c0)}) 14:21:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpid() fcntl$setstatus(r1, 0x4, 0x800) sched_setscheduler(r2, 0x5, &(0x7f0000000140)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 14:21:21 executing program 5: syz_init_net_socket$llc(0x1a, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 14:21:21 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:21 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:21 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x2000000, &(0x7f00000002c0)}) [ 372.826794] binder: 19929:19939 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:22 executing program 1: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xe, 0x0, 0x8}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x3b, &(0x7f0000000080)=""/59, 0x41100}, 0x48) 14:21:22 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x81, 0x20c080) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000080)={0x4, 0x0, 0x4, 0x5, '\x00', 0x7}) 14:21:22 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:22 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x6c00, &(0x7f00000002c0)}) 14:21:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$UHID_DESTROY(r1, &(0x7f00000000c0), 0x4) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 14:21:22 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='statm\x00') getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00032dbd7000fddbdf250b0000001c00010008000b00730800080048000000200001604d1a0fe8baaf5d0014000300ac141412000000000000000000000000080004004e2400001c00030008000800d100000008000100020000000000000000000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x6ff61e8ebc069bc1) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000000)=0x80) 14:21:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:22 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:22 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x3) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x4, 0x10880) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x0, r2, 0x1}) socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x100000000000000) open(&(0x7f0000000140)='./file0\x00', 0x2000, 0x44) 14:21:22 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x600, &(0x7f00000002c0)}) 14:21:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x510, 0x200000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0x95, "547cca34f3a4c494d37c0eec07c3b39ee73a7a6620d089c50aabd65b5909d7f9c8cb9aa7cb4761947c662ddda27093ea7efe14d6395d8cf0d446d19e06c285cd5db24568f4c305602049c77edd85b91f3039197e867fba88e90f1a1e1ec2398d163dd95fd1b391bd4fe7f87a71c68ee66fbe0813c9b42cd14f0ba84fd335dac209f5259d805d0fb829f4ee508524ad5598b7163a88"}, &(0x7f0000000400)=0x9d) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000440)={r3, 0xfffffffffffffff9}, 0x8) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="08002dbd700000000000040000000800060094b858582c000200149e0100fe8000000000000000000000000000bb14000100000035d100000000000000000000000008000400008000000800050000000000140003000800010002000000080003000000000008000500080000002800020014000100ff010000000000000000000000000001080005001e00000008000400ffff0000"], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x40080) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x43e, 0x0, 0x95, "387191de48b3e7998e8dfaa949d656640a214796d57a464e212ba77aa0f91e0166425a8d09f919b69e45b7141c0a07bd696c268da34c8094c8fd8e1d453dad88bd269141ce3ccf90ce535904306e39e27d7f77b300984a4dd947558f220ff0e5cec7932dff57aff4836b"}) 14:21:22 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:22 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x100) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0xb0000, 0x0) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x1ff, 0x280000) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x60, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6e7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd045}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000040) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:22 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:22 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x1e460, &(0x7f00000002c0)}) 14:21:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:22 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) [ 373.598811] FAT-fs (loop1): error, invalid access to FAT (entry 0x000006c0) [ 373.606274] FAT-fs (loop1): Filesystem has been set read-only 14:21:22 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x100, 0x0) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000200)="1b736f2885e64c5a383952365c07ead1683023dd2621a47cca3ae4504af6c75cba514b6725f2c9e719aac3513b3c205d359e8871020629d68ab53bb181f9ce48a2639c9f6dcda221cc800713463d9539501c631311bd63256f4289f9d8447931267dd542e40f07d7badf76c491fc3ba3106e61329c6264601f4ec80390918bff35caf168b25c510dd9ff") fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 14:21:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x3f55ae52, 0x3b, 0x1, 0x3, 0x0, 0x9, 0x7, {0x0, @in6={{0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, [], 0xc}, 0x2}}, 0x200, 0x400, 0x3f, 0x7, 0x5}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e24, 0x8000, @mcast2, 0x80000000}}, 0xa3, 0x3, 0x9, 0x200, 0x9}, &(0x7f0000000380)=0x98) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) accept4$llc(r3, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x800) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:22 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x60, &(0x7f00000002c0)}) [ 373.738127] FAT-fs (loop1): error, invalid access to FAT (entry 0x000006c0) 14:21:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rmdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(&(0x7f0000000300)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe801, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a0200020000f801", 0x17}], 0x0, &(0x7f0000000000)) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:22 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:22 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffbffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x164) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) 14:21:22 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x68, &(0x7f00000002c0)}) [ 373.949427] FAT-fs (loop1): error, invalid access to FAT (entry 0x000006c0) [ 373.956760] FAT-fs (loop1): Filesystem has been set read-only 14:21:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 373.998001] FAT-fs (loop2): Directory bread(block 2563) failed [ 374.029946] FAT-fs (loop2): Directory bread(block 2564) failed 14:21:22 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10) r2 = fcntl$dupfd(r1, 0x406, r0) getrandom(&(0x7f00000004c0)=""/231, 0xe7, 0x3) r3 = fcntl$getown(r0, 0x9) write$FUSE_LK(r1, &(0x7f0000000080)={0x28, 0x0, 0x6, {{0x80000000, 0xffffffffffffff7f, 0x2, r3}}}, 0x28) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000100)=r2) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000280)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xe8) setresuid(r4, r5, r6) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) mount$bpf(0x0, &(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)='bpf\x00', 0x0, &(0x7f0000000480)={[{@mode={'mode', 0x3d, 0xa5}}]}) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f00000000c0)) [ 374.057835] FAT-fs (loop2): Directory bread(block 2565) failed [ 374.065565] FAT-fs (loop2): Directory bread(block 2566) failed [ 374.073009] FAT-fs (loop2): Directory bread(block 2567) failed [ 374.080908] FAT-fs (loop2): Directory bread(block 2568) failed [ 374.104898] FAT-fs (loop2): Directory bread(block 2569) failed [ 374.129269] FAT-fs (loop2): Directory bread(block 2570) failed [ 374.153035] FAT-fs (loop2): Directory bread(block 2571) failed [ 374.182236] FAT-fs (loop2): Directory bread(block 2572) failed [ 374.193883] FAT-fs (loop1): error, invalid access to FAT (entry 0x000006c0) [ 374.201218] FAT-fs (loop1): Filesystem has been set read-only 14:21:23 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:23 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:23 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x200000000000000, &(0x7f00000002c0)}) 14:21:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0xfffffffffffffd08, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x1, 0x0) sendto$llc(r1, &(0x7f0000000080)="1dbf498f54360e41d5692efd2c890f7acc740d796a87d9fe92a9f24b795055bd1ff0276bb7d73d44cabbae8b878c5af7486b25000000003eb8ef0259c5bcadb96b939dda37dc4040222e96c22b54989669993b1800789f29c36862eccb90954a4d7009e8c7d111fa408eaee901066d8704db1824c5216a4d8aea65dcda677e9c1636faf6cdb1e6f0a73707e87d60df5eee5c43e344716d66a3b3ed800302ddd09038f906d3758af50031e184c26d68b3198a1f39122391c2922a2fad64b2b08cb42a18875399f116b86c898c64b0020371416b70050ecc6f85f1609ba478c8a5", 0xe0, 0x40004, &(0x7f0000000200)={0x1a, 0x89f62493ae15799a, 0x9, 0xfffffffffffff001, 0x100, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000240)={0x1d, 0x0, 0x200}) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 14:21:23 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() ptrace$setregset(0x4205, r0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)="ea3835dadd8618d4d8837b16ab0b84defef8311a7cff99ca12e7b7c0bb35753427345668a8892d630e9989ac611f6ddec0857b5b20630be1640ae93cd903d24d640100000000000000000000000000000000000000000000000000", 0x5b}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000100)=@nl=@unspec, &(0x7f00000000c0)=0x80) 14:21:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7fff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000200), r2, 0x2}}, 0x18) 14:21:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:23 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x4106000000000000, &(0x7f00000002c0)}) 14:21:23 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x82) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="f75da0e7964e9362c9ffd75cf62c9955f1ad7ee5a12fd4084d1ba6d55574dd59584f7ffbf0df4aaba98c768739d8c4a3659392b050690b48eb0d401a701bbdf5f8a469b54ac1e7f5763c5b226a6cd6ecb907737b8eda9b3f1bf90ac5729f008a9d4064b1f44de1d0a82f6d1266e20a42caf2b317a361735d3210b5c270b3df8fe36c0dfec1e92644c449a6d4d350a9f7a78233d0025668e33410266c79a4aef858a9dc53a48d56", 0xa7}], 0x1, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0x100000000}, @assoc={0x18, 0x117, 0x4, 0x1000}], 0x30, 0x20008000}, 0x4c810) write$P9_RRENAME(r1, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x20}, 0x28, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000003, 0xf9d) r1 = open(&(0x7f0000000100)='./file0\x00', 0x402040, 0xa0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000400)={{0x2, 0x2}, 0x0, 0x0, 0x7, {0x1}, 0x8000, 0x21f8e451}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r2, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={r3, 0x549, 0x3, [0x2, 0x1f, 0x3]}, 0xe) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), &(0x7f0000000380)=0x4) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0xfffffffffffffffe) memfd_create(&(0x7f00000003c0)='/selinux/mls\x00', 0x3) [ 374.453559] FAT-fs (loop1): error, invalid access to FAT (entry 0x000006c0) [ 374.460962] FAT-fs (loop1): Filesystem has been set read-only 14:21:23 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x4000000, &(0x7f00000002c0)}) 14:21:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:23 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000080)={0x40002002}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001e80)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000001f80)=0xe8) clock_gettime(0x0, &(0x7f0000002000)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000002100)={&(0x7f0000001fc0)={0x1d, r3}, 0x10, &(0x7f00000020c0)={&(0x7f0000002040)={0x1, 0x402, 0x377b9aff, {}, {r4, r5/1000+10000}, {0x2, 0xfffffffffffff5bd, 0x2, 0x80000001}, 0x1, @can={{0x2, 0x7}, 0x3, 0x0, 0x0, 0x0, "848dc1f4301e2603"}}, 0x48}}, 0x10) 14:21:23 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x300, &(0x7f00000002c0)}) 14:21:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) socket$inet6(0xa, 0xa, 0x6) 14:21:23 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8, 0x400000) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000100)) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r3 = accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) 14:21:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:23 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x48, &(0x7f00000002c0)}) 14:21:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0xffffffff, 0x7f, 0x5933eb40, 'queue1\x00', 0x2}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x800000000040, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000200)) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x4}, 0xfffffdce) ioctl$KVM_NMI(r1, 0xae9a) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0xc0045878, 0x0) write$input_event(r1, &(0x7f0000000100)={{0x77359400}, 0x16, 0x7, 0x10001}, 0x18) 14:21:23 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:23 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000004c0), &(0x7f0000000500)=0x40) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000480)={0x0, r2}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000280)={0x0, 0xb9, "126e381507f373766d285f10c88db853113940a7ce69d071a5012c13a8e190bfe2a48f9d925847e9bcd18e48794c949d7c409589dd015bffa31c6db59bfb50a2d8bebcce45a38dca290408b3b9ac8f1a00f2ac14423d70e28de3b6452f4538015e3cca1fc2659977c33e2798c747a5de965a48e26889d623381d26e42bf93b819e9450afa7878e9abdfb6a793cb6652d3c03282c9828854109b0808cabc3d28a49450e03512f8bfa27a86d06b7f20c28274b43c19039ba9ba3"}, &(0x7f0000000380)=0xc1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000003c0)={r3, 0x6}, &(0x7f0000000400)=0x8) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000100)="0f00d5baf80c66b8cb4c768c66efbafc0cb000ee650fe936e785650f01c9ef66b80500000066b9000000000f01c136640f3066b9780800000f32bad00466b80d00000066ef440f20c0663506000000440f22c0", 0x53}], 0x1, 0x5d, &(0x7f0000000240)=[@dstype0={0x6, 0x4}], 0x1) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000540)) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000440)={0x10001, 0x80000000000000, 0x7, 0x6, 0x28, 0x8}) [ 374.859257] binder_thread_write: 19 callbacks suppressed [ 374.859269] binder: 20169:20170 BC_FREE_BUFFER u0000000000000000 no match 14:21:23 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x630, &(0x7f00000002c0)}) 14:21:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x3) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e23, 0x3, @remote, 0x100000001}, {0xa, 0x4e20, 0x400, @empty, 0x7fffffff}, 0x400, [0x9, 0x3, 0x85, 0x0, 0xfffffffffffffffe, 0x5b, 0x2, 0x1000]}, 0x5c) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 14:21:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x40003e, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) r1 = semget(0x3, 0x3, 0x200) semctl$GETZCNT(r1, 0x1, 0xf, &(0x7f0000000080)=""/249) [ 375.008832] binder: 20198:20199 BC_FREE_BUFFER u0000000000000000 no match 14:21:23 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x400000000000000, &(0x7f00000002c0)}) 14:21:24 executing program 1: r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:24 executing program 3: clone(0x40400, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000100)={0x0, 0x3ff, 0x8ecc, 'queue0\x00', 0xa82a}) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0x7, 0x1]) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) accept(r2, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) [ 375.142240] binder: 20213:20216 BC_FREE_BUFFER u0000000000000000 no match 14:21:24 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cpuset\x00') lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x101200, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x99056da2b78d99d3}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x23bc, 0x3b, 0x600, 0x70bd29, 0x25dfdbfd, {0x11}, [@generic="45eeb87d7c598cb295a10e866b6225a6dbd1646d024780ed4052f704fc4dc3d94f14779bc455cd33d59cac769fc0557a4d92d179239bd219b307f793e07eedd6", @generic="9a47c4f2381fbbc996533fde46f8e10506667a9ff81b4df632", @nested={0x1ec, 0x74, [@generic="645c20860810525790e115b16ab76c575a7ddd0a9cad07f6030dfcb6b1b15d5cc2d9afe35b1bb4fbc6c27c30344c16349db60cc54f105ec37c95d79c6a5ff9aa0684cb273598195bd94a1ac5da7c71cc4e3228cf7d662f1be3fd12f85f7730a3fff1c744862f4f6b67d4c7d001ea0cf1e681ba3b3530154ac3b7fcee6c9c31c6bb66705348fe79fcc333ac77fe209ea1d61bb2e593af719611ef26deffa1b3cf98d45420c8f128b6d1dc9063a0651667249c6daf92142d5756c501d59ac034721fb1de56c0e37c5fbe2f77c6e2bc07dbf01d5ec442ee6da3f4e5484046f76834", @typed={0x8, 0x57, @uid=r1}, @typed={0x100, 0x14, @binary="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"}]}, @typed={0xc, 0x64, @u64=0x887f}, @generic="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", @generic="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", @generic="554498d836c4903ba70cd80e486da3f0659f538dc50a3125368fb1b3c2e81a8c719524309add2f9c4013282d1249a05157a54062769604a8c4", @nested={0x101c, 0x77, [@typed={0x8, 0x22, @pid=r2}, @typed={0x8, 0x55, @ipv4=@multicast1}, @generic="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", @typed={0x8, 0x85, @fd=r3}]}]}, 0x23bc}, 0x1, 0x0, 0x0, 0x8000}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0xc0045878, 0x0) 14:21:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r1, 0x50, &(0x7f0000000100)}, 0x10) 14:21:24 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x4800000000000000, &(0x7f00000002c0)}) 14:21:24 executing program 1: r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) [ 375.335817] binder: 20236:20240 BC_FREE_BUFFER u0000000000000000 no match 14:21:24 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x3) r1 = accept4(r0, &(0x7f0000001680)=@generic, &(0x7f0000000140)=0x80, 0x80000) getsockname(r0, &(0x7f0000001700)=@can={0x1d, 0x0}, &(0x7f0000001780)=0x80) connect$packet(r1, &(0x7f00000017c0)={0x11, 0x7, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000080)={0x0, {0x77359400}, 0x2, 0x7f}) 14:21:24 executing program 1: r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:24 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x60000000, &(0x7f00000002c0)}) 14:21:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:24 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) [ 375.525558] binder: 20258:20259 BC_FREE_BUFFER u0000000000000000 no match 14:21:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x5) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) r1 = getpgrp(0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x100000001, 0x1f, 0x7fffffff, 0x33, 0x0, 0x7, 0x20020, 0x8, 0x1f, 0x93b, 0xffffffff, 0x1ff, 0x26, 0x80, 0x3, 0x3, 0x6a8, 0x200, 0x8, 0x6, 0xf3, 0xffffffffffffffff, 0xffff, 0x1000, 0x81, 0x100000000, 0x7fffffff, 0x7ff, 0x8, 0xb89b, 0x6, 0xbf, 0x4703b23a, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x21, 0x3, @perf_bp={&(0x7f0000000080), 0xc}, 0x420, 0xfffffffffffffff7, 0x5, 0x7, 0xfffffffffffffff8, 0x2, 0x1f}, r1, 0x5, 0xffffffffffffffff, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.events\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xe8) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f0000000400)={0xa0, 0x19, 0x1, {0x4, {0x40, 0x4, 0x8}, 0x108, r3, r4, 0x8, 0xb3, 0x2, 0x6, 0xfeba, 0xe00b, 0x101, 0x4, 0x3, 0x400, 0x8, 0xffffffffffffffff, 0x3, 0x80000001, 0xfff}}, 0xa0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x103000, 0x0) 14:21:24 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x7a, &(0x7f00000002c0)}) [ 375.680808] FAT-fs (loop1): bogus number of reserved sectors [ 375.686939] FAT-fs (loop1): Can't find a valid FAT filesystem [ 375.708300] binder: 20287:20288 BC_FREE_BUFFER u0000000000000000 no match 14:21:24 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x22040, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000300)='/dev/md0\x00', 0x200, 0x0) timer_create(0x7, &(0x7f0000000200)={0x0, 0x35, 0x0, @thr={&(0x7f00000000c0)="b45a6430d1f6b2564f62cfe6f71b83226a5cef875bf77d593187b244c3463343922425f90d199cec9b90fc77413566a9f32c7861cff7b4746e7f8312df03be3b219c2b82f9e9766e85a12f9e491d72f88fd1d7296a8897b068a267574f33f0096fa55d5abc11ab5199ea7bba85748b27dd400994e1d3ce0bd9", &(0x7f0000000140)="87458003ba40d6547cfb707e7ffbf9ae3ce273ea08ab862aaf025763b0fa911cf1c9e174"}}, &(0x7f0000000240)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400, 0x0) init_module(&(0x7f0000000280)='\x00', 0x1, &(0x7f00000002c0)='\'lo\x00') ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000340)=0x7) syz_open_pts(r1, 0x202) 14:21:24 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x300000000000000, &(0x7f00000002c0)}) 14:21:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:24 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x1000000, 0x2000) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x3) 14:21:24 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:24 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x41060000, &(0x7f00000002c0)}) 14:21:24 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x500, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @remote, 'veth0\x00'}}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)=0x2) 14:21:24 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) [ 375.936401] binder: 20310:20314 BC_FREE_BUFFER u0000000000000000 no match [ 375.956919] FAT-fs (loop1): bogus number of reserved sectors [ 375.962875] FAT-fs (loop1): Can't find a valid FAT filesystem 14:21:24 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 376.125212] binder_thread_write: 19 callbacks suppressed [ 376.125225] binder: 20343:20349 BC_ACQUIRE_DONE u0000000000000000 no match [ 376.161596] FAT-fs (loop1): bogus number of reserved sectors [ 376.167587] FAT-fs (loop1): Can't find a valid FAT filesystem 14:21:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 14:21:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) [ 376.172919] binder: 20343:20349 BC_FREE_BUFFER u0000000000000000 no match [ 376.186239] binder: 20343:20349 BC_ACQUIRE_DONE u0000000000000000 no match [ 376.204602] binder: 20343:20349 BC_FREE_BUFFER u0000000000000000 no match 14:21:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:25 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x10, &(0x7f00000002c0)}) 14:21:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x3, 0x1, 0x80, 0x3ff, 0x0, 0x1, 0x4400, 0x2, 0x6a5, 0x4, 0x2, 0x8, 0x8, 0x100000000, 0x2, 0x1, 0x5, 0x60c, 0x1, 0xfffffffffffffffc, 0x3, 0x3, 0x503, 0x0, 0x8, 0x80, 0x9, 0xf6, 0x6, 0x1, 0x7, 0x81, 0x87, 0x7fffffff, 0x241, 0x7, 0x0, 0x7f, 0x6, @perf_bp={&(0x7f0000000080), 0x8}, 0x2140, 0x5, 0x0, 0x3, 0x8, 0x1}, r1, 0xc, 0xffffffffffffffff, 0x2) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)) 14:21:25 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000340)=0x1, 0x4) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x5, 0x0, @thr={&(0x7f0000000080)="84102df7f239eab8e781c6d18da148d91eef8736b49fc1040877fbfb62ab7402d55e59aa3d83dda50102abf6c421004f3520ed648e61cc9d54783cb98905c08f22eb8dbbd90aca7376e0c2d731683e641a185f27c58e359940e01931d67a205126c085f3bb793656586fd60dac30939b0d7aa5134d1e52b9d42f3042551ab10aad339b9e3a831c6c8272af738e9b1244c5943a9400394cbbaf20407ad3ff4e9e8c850b1c7817ea00b63e6f0309ba404c066e7616aa5a5db013b16e1f261f5c5b842aa137f9a060328c04fca3a1e5f0a501eb51ec83a55efcfbd06042814a486fdd0caed6c3872ecf", &(0x7f0000000200)="ee6e3efda70ccdcb419332f8e5182b11de8670231b987b4f1ba15244794cfa4cce0ccffdb6b95c3997808ae9525a4fd815047daab77e7c4a444860f05aef8331806feed35242dff33a7e0c8fb79b5226323b4525ba8f0c746a5ffedf4c984e27799bfdefc93aa8153dbd316d7b6e08fdb4a012dd829e274167fc979df88c74429b31dfb65c7d2bbb6a0bebeb53a176dcceafdeeb2e02bcd3a7201ad40ab0dab666622ef9"}}, &(0x7f0000000300)=0x0) timer_getoverrun(r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) [ 376.345224] FAT-fs (loop1): bogus number of reserved sectors [ 376.351197] FAT-fs (loop1): Can't find a valid FAT filesystem [ 376.387044] binder: 20376:20379 BC_ACQUIRE_DONE u0000000000000000 no match [ 376.410521] binder: 20376:20379 BC_FREE_BUFFER u0000000000000000 no match 14:21:25 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:25 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:25 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fdatasync(r0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) 14:21:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x412000, 0x0) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000200)={[], 0x4, 0x0, 0xea, 0x0, 0xffffffffffffff67, 0xf000, 0xf000, [], 0x100}) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @remote, 0x101}, 0x1c) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400800, 0x0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x7e9) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:25 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) [ 376.590099] FAT-fs (loop1): bogus number of reserved sectors [ 376.596045] FAT-fs (loop1): Can't find a valid FAT filesystem 14:21:25 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:25 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x10000000, &(0x7f00000002c0)}) 14:21:25 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x80000) accept4$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000080)=0x60, 0x800) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 14:21:25 executing program 3: clone(0x800, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = shmget(0x3, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000040)=""/16) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$TIOCCONS(r2, 0x541d) r3 = accept(0xffffffffffffffff, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000e80)=0x0, &(0x7f0000000ec0), &(0x7f0000000f00)) fstat(r2, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001080)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000001180)=0xe8) r11 = getegid() sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)={0x84, 0x3e, 0x102, 0x70bd27, 0x25dfdbfb, "", [@generic="cc704ab76d3733d7b2fa50a447ca777838d78d1798822837344020fb41418b6ebcada8ea83e5b245837587cf0fe9221dd125f72e58d85cd3f1e4800862034b90dcb60c4667cfb4b13246b58acc65a01134878a75aec6bbfb8aa2be74cc37a4a2a8900f7622bbafb80dbd4226b50504114c80f2ba"]}, 0x84}, {&(0x7f00000000c0)={0x1c, 0x29, 0x100, 0x70bd26, 0x25dfdbfe, "", [@generic="6a346a555b655202", @typed={0x4, 0x81}]}, 0x1c}, {&(0x7f0000000440)={0x964, 0x39, 0x231, 0x70bd27, 0x25dfdbfe, "", [@typed={0x8, 0x9, @u32=0x6d}, @generic="02a40e0aa32a18a32106755e6bd8eabbe8e0cdaabaf6da799799b990a4c6e80e8ad8988f19ce5c28bfd8fa3a7544a3bb4508f3aeb1c1c05aca372952bc09c6d63a7761d8dafef236090c0fcab4e1b4959548fe63b41295eafffdcd64c51484f26057f087e28ff6ad5acc935d20f103", @generic="f4c4cd6be4f3b333a7ddd116d8e6197ef509dfc430bc614c6bd34d3978be5fc7b392c0fec79e2c884f08a656fcda23ce1f42a3f03a60ef38f2e46b74fe40abc9d85d0c60ebe760693aacb6f963ec932fb0a99935a27b2a34f5810236975f7165dc9b05c1d66745093e8509b4f2fcd57c86873ea8ed1ea55a8e6fdad65de2472ab00ed213a7320b47c99b6d1c9a25661c6b17ac20bacdc62cba7938381419c7e07369a95d30dedd9cde53bbb19c63db8a6ce6bac23f", @nested={0x318, 0x8a, [@generic="ce9085b33ee53a45acab5bd4fea9b07eea1b59f58206532c36d368fc1fa76d03f646643b85ccec977fa959b5cf8669c231696821bd09e331f6b4ca942ef17e6100fe97230da3b7b381ebc4fcb487b9d3253e7b3aa217ca662ef78218e0505e52568321774759f4958d8bcf8f7b042c1b745c7c43e379e4b0fdd6d8b6401ef8f5f41671fcc99733e01d72eccd774ad0887fe5a47330a09893b0f037835f04fec7b63b1f", @generic="76b4d6b4f6ce6d3b0219f5ec11287c861f52c780acbebaf70d21fc784251bd156904de15cd95294ead7fccfb2051dbffa6392a8e98c47adc15adee91bfe8f6c238fb9710d59d8b174afb5c033dbab5e9b8fc760913a79da3d80c722c1348", @generic="c54c4fac6599e42ec401021c1d9576373d5d72efa0f992c578957d1fd7d723ea433480ba7f6c224b7b0d9a707cdea6d362f6eb824370b867376ceb60429a55a29cc19a7ab3a2b8ca16f1", @generic="4bcc7cb2edf63068b7f98fac82d6003c956c4ef4b8eb0148ef1bc7bf2a308213ae50660360426d8325104c2b7f286f122ee377b115c2eb5da9a076e97cd6a667a92363c73d3d64ef127effc54c4c508867e3d43f7082060f697882f4d195004f045caae18824ed6e8dcd03b5acb6ead9c6a90f6e5b6dd6a998ddc62c64a0697db2ad4e5be8498accd6d51785ddd85c0c383c69e0e5e088fbb00d0bc55788c7626320f72d7d99466dfcfd7c279761c51321fbf2f6827fbe06a3721f5e94b0d40067dcd7d83526250947e10eded3d415c350a0be01d9ca8f89c55faf3090419ddaa59e50a4bc6cb9cf993302bfe5b7f8a05abc43", @generic="9c1ea74b42d31d27aea00dd6b0774f1b0f5520415c99a776ce0cd98512295d49cb2e1167787ac8dbcb8242e99984c720e721f05c1fbe068f6b07df9ae8e5adb9f73c0a8fd27d94e74a2c1b11146d66e0561a4f270277e714fab30b61d6e4b2023a1877cb512403c887f2a0324a0237f29be75fc8cbd877f20d47a9f8f2386d58b46972bae9771228f9ce52aa5a0d44342416c891d3bb43d69c3214e58d6bced4170116a75e976a814c8cacd1cf1ad01c64e7", @typed={0x8, 0x5d, @pid=r1}, @typed={0xc, 0x8c, @u64=0xfffffffffffffffb}, @typed={0x8, 0x34, @pid=r1}, @typed={0x8, 0x1b, @pid=r1}]}, @typed={0x8, 0x39, @pid=r1}, @nested={0x448, 0x0, [@typed={0xc0, 0x5a, @binary="bbc9593ac27f58b5ff306fe51d579cfcc6fb80a8394e065d9bc394648211c36f9c4de9c4c1d7df0df7e7b3a2a62c2cce0582a053433cd82c59760c4aaeb3fdded12ffd68f571c73f69f52ae482bdadd607e193f9d3193ef391b50845808713c4dbe26af1110678d3fa04041d5fee2602ed393b8b022788f608f906bb970ffc537adadcda79bee568a0813a27b1c95c6fcf3092cdb73e7a4f92e93e465678accba932c42a80166cabe4ba0ab4708010409cd62ccd6082a3a65800"}, @typed={0x8, 0x3, @u32=0x7fff}, @generic="50ecaaaea9274dd8d755c5ddf8bd4054b43f642cc9ff78cf92246f793eb337005e2e2dd6bfc9196e3f1772a0642689b18db4930a1681fbff0742620bc6c0883692a87c0a3b3a79d0fcace2ddec66d431d6c1f52fd223eb05c88a482cd931b187e40541129d3a2bd7af237007704f94c15840f6d1e83bbf51398746fcbde351176706", @typed={0x4, 0x3f}, @generic="37bb3234fdf21636b33a2fb2e56a60c1e1cb93b0710da6117c588a8040afc6864706f973ee23d55a2ce721e68e857401e6567ff4a90d7117e66a4c3c7a4feaae5638c637c34f264be1f4bab562648c9d49a72d5d5fcee34a3bf6d23a70736cadaae6ba83483338bd8b962b5a1b9965486ecd12a329b6a73854b06a23c7eb21ccd4fb46b7f3dd4c64a068298020cf5a736899cdcffa", @generic="e6398307e4bf00c3ad30fd47a7dc2d006defed34a1daf64c72678a62eb8ae9afa80659d51e704acad0d2f636816a78f1cfac40feb4c4696747a7a2ab1ed5e03b5dbceb2307cd57a34adbdf29a30fc9353d89300ecabf79285e35dadd867a4505371db7a5bfdf55ffa17abfac217deaa810230ced4415d6fdb38e", @generic="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", @generic="fae69a4de654f201f9541847adbfa9be2a52e7fe3b49b82e1abeff2fe3c985052b3d7797a68e435ba8e70de9bba922451b0238c1fdb0e3657e32901cf9c6a1ff06ef3426af8e449c16f2be06b18b6248e38e55dc965a4dad1718a7d84e9cb1812dffdf53b42de6c3af55fcfbbf90070cfbe046dc9babe299ada7d71686765f727372901b79", @generic="1022aff67c8144d51c06ad6f500dd59345dd9fa85748f73da5675d779e37cc3716a2584d749aeeb189711d3c94918c4bae2df3ea0f987e814c9ffcf3c0909c7882081fe9c797fd31757dab33e2b87015", @generic="6880b7747bcd0ac2118bace3d41be9d7027be6cfc059"]}, @generic="ebf83ae4cc6f2ba0e36e68542b7b48312253a06f47eeb013e6ba9e5406645e8c1d9395f1b5bdbd808e546154dc0032225cf735dc35e815a27abea8aea93a06add430bf512568603548f18400cb96483df91a6789245d8790bd74854d2084d9dc37d39a32e02bc8bbb940e49243dc02144c979cdafbbf176b1d402bb4cdecf64a2508667e3bd7b8652733c2ce856ba46f7a046b31d9b23a97c620cabe394b7d6a28d01d8bf6809c7e279067e114c1e9cd8d4b4083da5c4971c62803e976"]}, 0x964}], 0x3, &(0x7f00000011c0)=[@cred={0x20, 0x1, 0x2, r1, r4, r5}, @rights={0x38, 0x1, 0x1, [r3, 0xffffffffffffffff, r3, r2, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2]}, @cred={0x20, 0x1, 0x2, r1, r6, r7}, @cred={0x20, 0x1, 0x2, r1, r8, r9}, @cred={0x20, 0x1, 0x2, r1, r10, r11}], 0xb8, 0x24008894}, 0x4000) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r12, 0x40045568, 0x8) [ 376.759115] FAT-fs (loop1): bogus number of reserved sectors [ 376.765067] FAT-fs (loop1): Can't find a valid FAT filesystem 14:21:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0xa00, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000240)={'ip6_vti0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0xff}, &(0x7f0000000200)=0x8) 14:21:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 376.808147] binder: 20432:20438 BC_ACQUIRE_DONE u0000000000000000 no match [ 376.829752] binder: 20432:20438 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:25 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x6) [ 376.959670] FAT-fs (loop1): bogus number of reserved sectors [ 376.965717] FAT-fs (loop1): Can't find a valid FAT filesystem 14:21:25 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:25 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x7a00, &(0x7f00000002c0)}) 14:21:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x4000, 0x0) 14:21:25 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, @perf_bp, 0x20001, 0x0, 0xff}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000180)={0x6, 0x1, 0x100800001, 0x4000008d}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000000c0)) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0xf1, @mcast1, 0x3}, 0x1c) 14:21:25 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000240)=0xf0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @local, @loopback}, &(0x7f00000002c0)=0xc) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000300)={@mcast1, @ipv4={[], [], @loopback}, @dev={0xfe, 0x80, [], 0x16}, 0x2, 0xfffffffffffffff7, 0x6, 0x400, 0x401, 0x1, r3}) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000080)) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) sync_file_range(r1, 0x1, 0x7, 0x4) [ 377.091782] FAT-fs (loop1): bogus number of reserved sectors [ 377.097733] FAT-fs (loop1): Can't find a valid FAT filesystem [ 377.124601] binder: 20474:20478 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:26 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:26 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x3, &(0x7f00000002c0)}) 14:21:26 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, r2) [ 377.235194] FAT-fs (loop1): bogus number of reserved sectors [ 377.241184] FAT-fs (loop1): Can't find a valid FAT filesystem 14:21:26 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) [ 377.283849] binder: 20495:20501 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:26 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x280400, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000080)=0x2800, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x305000, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000100)={0x4ece, {{0xa, 0x4e22, 0x1, @remote, 0x6}}, {{0xa, 0x4e22, 0xffff, @loopback, 0x4}}}, 0x108) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000000c0)) 14:21:26 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x6000000000000000, &(0x7f00000002c0)}) 14:21:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x14, "2d3677dd86b6097f8b9c21938cec76e5d1386b07"}, &(0x7f00000000c0)=0x38) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) 14:21:26 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:26 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:26 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:26 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) getpgid(r0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) bind$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0x138, 0x138, 0x0, 0x138, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc8, 0x138}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x71, 0x3ff, 0x0, 0x0, "1419acaa2639fb65581e8f8b43def0a6daa8b9ffee90c58c4da7e3c793b0bc5e08896645c7c8d7c41256939cb5f6d7c184305266fe48488b7633b143b2cac3c1"}}}, {{@uncond, 0x0, 0xc8, 0xf8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x200, 0x3, 0x474}, {0x6, 0x6, 0xffffffff}, 0x2, 0x8}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) ioctl$NBD_DO_IT(r2, 0xab03) getsockopt$nfc_llcp(r2, 0x118, 0x0, &(0x7f00000000c0)=""/137, 0x89) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f00000007c0)=""/4096) ioctl$VT_ACTIVATE(r2, 0x5606, 0x10000) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:26 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) [ 377.531266] FAT-fs (loop1): bogus number of reserved sectors [ 377.535996] binder: 20527:20534 BC_ACQUIRE_DONE u0000000000000000 no match [ 377.537228] FAT-fs (loop1): Can't find a valid FAT filesystem 14:21:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3e5, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x80800) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x600, 0x0) bind$pptp(r1, &(0x7f0000000340)={0x18, 0x2, {0x2, @loopback}}, 0x1e) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x55, "f7188c29a108de9319f8246aaf1254047ca02c407c7fa8e6166abd2dc25a8060e8395078aa662f3d5becf8c5173d44a9a346d5f8bb28941c9e285da9e4059117022f5ca74337f608339bbbe024029e1d61763b26b6"}, &(0x7f0000000140)=0x5d) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={r2, 0x48, &(0x7f0000000200)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e22, 0x400, @local, 0xff}, @in6={0xa, 0x4e21, 0x0, @empty, 0x71a}]}, &(0x7f00000002c0)=0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x1ffffffff, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x4) ioctl$LOOP_CTL_REMOVE(r3, 0xc0045878, 0x0) 14:21:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x80, 0x700) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x1, 0x3, 0x0, 0x5, 0xffffffff, 0x3, 0x1, 0xff, 0x0, 0xc9, 0xffffffff, 0x80000001, 0x2}, {0x7fff, 0x1, 0x7, 0x7ff, 0xfff, 0x2, 0x0, 0x27d5e273, 0x10000, 0x3, 0x2, 0x6, 0x101}, {0x1f, 0x81, 0x4, 0x5, 0x5, 0xe7, 0xbc, 0x0, 0x10001, 0xfffffffffffff801, 0x8001, 0x1008, 0xf67}], 0xffffffffffff7fff}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 14:21:26 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x1000000000000000, &(0x7f00000002c0)}) 14:21:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:26 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:26 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:26 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) [ 377.739173] binder: 20559:20565 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:26 executing program 5: socketpair(0x1000000000010, 0x0, 0x26, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'sit0\x00', {0x2, 0x4e20}}) perf_event_open(&(0x7f0000000180)={0x2000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xedd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) 14:21:26 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x5000000, &(0x7f00000002c0)}) 14:21:26 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0)={0x1, 0x4}, 0x2) fallocate(r0, 0x20, 0x7, 0x7) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0xc0045878, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x800, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) [ 377.795722] FAT-fs (loop1): bogus number of reserved sectors [ 377.801699] FAT-fs (loop1): Can't find a valid FAT filesystem 14:21:26 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x800, 0x0) r1 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, [], 0x11}, 0xa, r2}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41ffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, r1, 0x0, r0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f00000000c0)) 14:21:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 377.912710] binder: 20581:20591 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, r1) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x101002) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000080)=""/145) 14:21:26 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x500, &(0x7f00000002c0)}) [ 378.051146] FAT-fs (loop1): bogus number of reserved sectors [ 378.057132] FAT-fs (loop1): Can't find a valid FAT filesystem 14:21:27 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r2 = accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) setsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f0000000000)={@local, @rand_addr=0xaa7}, 0xc) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000040)=0x100000001, 0x1) 14:21:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x37cb, 0x4, 0x3, 0x5, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000200)={r1, 0xa0, "7e4c7e81fe81c2c29e3da2e8d46562871ec4f816bbb061166e1fc6fd33b089c18f397c366d587ff21a9a1a9e0d4419831932321856ddd4684637f20abcc94d48170b61aa902c88d2d3b623f62e8abb05e19d078c50dd8a1a16940b9790487e43c2a6185783e050bc21639a7249e30dbbe5c3c12b461015ea045cbf72e052fec9ff03620ce86a20682866bb79436aa63d5058acef50b605fb84d00fb4ecd1e3f5"}, &(0x7f0000000100)=0xa8) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x2) r2 = open(&(0x7f0000000140)='./file0\x00', 0x8000, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') write$vnet(r2, &(0x7f0000001600)={0x1, {&(0x7f0000000500)=""/249, 0xf9, &(0x7f0000000600)=""/4096, 0x3, 0x2}}, 0x68) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x140, 0x0) mount$bpf(0x0, &(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='bpf\x00', 0x20001, &(0x7f0000001700)={[{@mode={'mode', 0x3d, 0x7ff}}, {@mode={'mode', 0x3d, 0x7}}]}) r6 = syz_open_dev$dmmidi(&(0x7f00000003c0)='/dev/dmmidi#\x00', 0x1, 0x4000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r3, 0x80a, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r0}, {0x8, 0x1, r5}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r6}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8004) 14:21:27 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x4, &(0x7f00000002c0)}) 14:21:27 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x210000, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x0, 0x2, 0x742f, 0xaaf]}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x4a, "ae097764c1aa10f644b276ccf8dee756d3ac83fc3986bbd4c8fbd9a5b1878dee4d1f40a2fcb4eb03323591a884e2896f919dd7a75febba3b1c3eac3464ce849f90745899ea3946f98a7a"}, &(0x7f00000002c0)=0x52) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r2, 0x79, 0x10}, 0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) write$FUSE_DIRENT(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="68000000feffffff05000000000000000200000000000000030000000000000012000000070000002f6465362f6c6f6f702d636f6e74726f6c000000000000000110000000000000ffff00000000000009000000bcf100002f6465762f7663730000000000000000"], 0x68) tgkill(r3, r4, 0x27) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000200)={0xc, @loopback, 0x4e20, 0x0, 'sed\x00', 0x8, 0x3, 0x30}, 0x2c) 14:21:27 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174001004010002", 0x11}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:27 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) [ 378.190241] QAT: Invalid ioctl [ 378.194011] QAT: Invalid ioctl [ 378.225018] QAT: Invalid ioctl [ 378.229337] QAT: Invalid ioctl 14:21:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000200)=""/209) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 14:21:27 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40442) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) write$cgroup_pid(r2, &(0x7f0000000200)=r3, 0x12) r4 = fcntl$dupfd(r0, 0x400000406, r0) setxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U-', 0x2}, 0x28, 0x0) getpeername$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) [ 378.309835] FAT-fs (loop1): invalid media value (0x00) [ 378.315284] FAT-fs (loop1): Can't find a valid FAT filesystem 14:21:27 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x600000000000000, &(0x7f00000002c0)}) 14:21:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174001004010002", 0x11}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x4) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) write$binfmt_misc(r0, &(0x7f0000000040)={'syz1', "23170e24c90f98c6cf"}, 0xd) 14:21:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) [ 378.486048] FAT-fs (loop1): invalid media value (0x00) [ 378.491483] FAT-fs (loop1): Can't find a valid FAT filesystem 14:21:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174001004010002", 0x11}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffa000/0x2000)=nil) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:27 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2800, 0x0) accept(r1, &(0x7f0000000140)=@nl=@unspec, &(0x7f00000001c0)=0xffffffffffffff33) 14:21:27 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x6800000000000000, &(0x7f00000002c0)}) 14:21:27 executing program 5: socketpair$inet6(0xa, 0x804, 0x3f, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x80000000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000340)=@sack_info={0x0, 0xffff, 0x9}, &(0x7f0000000380)=0xc) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f00000003c0)={0x1ff, 0x1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000100)={r1, 0x913}, &(0x7f0000000280)=0xffffffffffffff35) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r3, 0x0, 0x20, 0x7f}, &(0x7f0000000240)=0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000000c0)) ioctl$RTC_VL_CLR(r2, 0x7014) 14:21:27 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfd89) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x24f) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 14:21:27 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) [ 378.652812] FAT-fs (loop1): invalid media value (0x00) [ 378.658230] FAT-fs (loop1): Can't find a valid FAT filesystem 14:21:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, r1) 14:21:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174001004010002000270", 0x14}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:27 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x7a00000000000000, &(0x7f00000002c0)}) 14:21:27 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fdatasync(r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) [ 378.876577] FAT-fs (loop1): invalid media value (0x00) [ 378.882085] FAT-fs (loop1): Can't find a valid FAT filesystem 14:21:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174001004010002000270", 0x14}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:27 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:27 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x3, &(0x7f0000000140)=[{&(0x7f00000000c0)="2225807ce06f2b5cf4f4b50dd37b4c49a923574b022fef7dee7b45b891aaaaf044c590b9a578bf03fb17acddd95057", 0x2f, 0x5}, {&(0x7f0000000100)="db95", 0x2, 0x16}, {&(0x7f0000000240)="d1e3a9f6e370eeb4eb4abb6515e4d68b411da17096c9342720a03bf2aab74eb4bdd06062f29570577a125c2925f2564907eddc28ec4002522d92449608aa9384af82baff6dd6fbbb5b3267a163e9fb27467cd3d5272647d3bceaa48dfe004801afdcf0dd7b4fef06ae22f51f901ebda07d78c9c0d59d2aeef4def88712025e3cd3f6bfe9e17425ddc47b09932795a793029201e9bdaecf3f7d7572159cfeb86c225c71826a44b272a8479c3f33fe6ac56be4ff9338139779a96dc550725ee4a3da2ef042b9af5cd71c044cabc7c6149bce9026a1180117", 0x8f, 0x8000}], 0x10000, &(0x7f00000001c0)={[{@quiet='quiet'}, {@part={'part', 0x3d, 0x8e4}}]}) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0xfffffffffffffe38) 14:21:27 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x7) 14:21:27 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x48000000, &(0x7f00000002c0)}) 14:21:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x4, 0x4) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:28 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) r2 = accept(r1, &(0x7f0000000000)=@alg, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x0, @empty, 0xffff}, @in={0x2, 0x4e21, @rand_addr=0x80}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r3, 0x4}, &(0x7f0000000200)=0x8) [ 379.182539] FAT-fs (loop1): invalid media value (0x00) [ 379.188097] FAT-fs (loop1): Can't find a valid FAT filesystem 14:21:28 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x18e1010000000000, &(0x7f00000002c0)}) 14:21:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 14:21:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000080)={{0x1, 0x3}, {0x7f, 0xfffffffffffffff9}, 0x1, 0x7, 0x80000000}) 14:21:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:28 executing program 3: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f00000000c0)) clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() r2 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) accept(r2, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174001004010002000270", 0x14}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:28 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x68000000, &(0x7f00000002c0)}) 14:21:28 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) read(r0, &(0x7f0000000100)=""/78, 0x4e) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) [ 379.504912] FAT-fs (loop1): invalid media value (0x00) [ 379.510288] FAT-fs (loop1): Can't find a valid FAT filesystem 14:21:28 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:28 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x22080, 0x0) write$P9_RLINK(r0, &(0x7f0000000080)={0x7, 0x47, 0x2}, 0x7) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) 14:21:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 14:21:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:28 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x30060000, &(0x7f00000002c0)}) 14:21:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000", 0x15}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:28 executing program 3: getpid() clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:28 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) [ 379.741622] FAT-fs (loop1): invalid media value (0x00) [ 379.747104] FAT-fs (loop1): Can't find a valid FAT filesystem 14:21:28 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x9, 0x2f23953f}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x7}, 0x8) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@ax25, &(0x7f0000000100)=0x80, 0x80800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x80) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000002c0)={0x20, 0x7, 0x4, 0x7f8, 0x7f, 0x4, 0x7, 0x2, 0x10000, 0x6}) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'nat\x00'}, &(0x7f0000000140)=0x78) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000000c0)) 14:21:28 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="020006000000000000000840", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000", 0x15}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x100000000, 0x8922, 0x6fdc, 0x9, 0x5, 0x9, 0xfffffffffffffff9, {0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x400, 0x1, 0x9, 0x3, 0x1}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r1, 0x44, 0x100000001}, &(0x7f00000002c0)=0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000080)={0x200, 0x8}) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0xc0045878, r4) [ 379.934676] binder: 20858:20863 unknown command 1074266112 [ 379.965281] binder: 20858:20863 ioctl c0306201 20000100 returned -22 14:21:28 executing program 7: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='md5sum\x00'}, 0x10) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000180)) getpeername$llc(r0, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000140)=0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx2\x00'}, 0x58) 14:21:28 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:28 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x7, 0x200000000000081) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) fchmod(r0, 0x1) [ 380.058675] FAT-fs (loop1): invalid media value (0x00) [ 380.064212] FAT-fs (loop1): Can't find a valid FAT filesystem 14:21:28 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x10080) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x406, r1) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x9) ioctl$LOOP_CTL_REMOVE(r2, 0xc0045878, 0x0) [ 380.134878] binder_thread_write: 17 callbacks suppressed [ 380.134889] binder: 20882:20884 BC_FREE_BUFFER u0000000000000000 no match 14:21:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000", 0x15}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 380.223777] binder: 20882:20891 BC_FREE_BUFFER u0000000000000000 no match 14:21:29 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000200)={{0x7, 0x7, 0x4, 0xffffffffffffff28, 'syz1\x00'}, 0x1, [0x8c1, 0x200, 0x5, 0xce, 0x7fff, 0x1ff, 0x3, 0x5, 0x2, 0xc602, 0x7, 0x100, 0x8, 0x20, 0x5, 0x9, 0x8, 0x5, 0x3f, 0x6, 0x4, 0x800, 0x8, 0x2, 0x3ff, 0x5, 0x4, 0x0, 0x1, 0x9, 0x9, 0x80000000, 0x8001, 0x5, 0x3, 0x3ff, 0x80000000, 0x8, 0x20, 0x7, 0x8, 0x5c861279, 0x0, 0x65d1, 0xfffffffffffffbff, 0x1, 0x83d1, 0x3cc, 0x100000000, 0x6, 0x7, 0x0, 0x304, 0x0, 0x0, 0x800, 0x93bf, 0xd3, 0x3, 0x866f, 0x100000000, 0x5, 0xa562, 0x9, 0x1f, 0x400, 0x0, 0x100, 0x8ce, 0x9, 0x1000, 0x1f, 0x5, 0x2, 0x7fffffff, 0x6, 0x1ff, 0x3, 0x200, 0x401, 0xffffffffffffffff, 0x23eb, 0x5, 0x9, 0x7f, 0x5, 0x5, 0xfff, 0x4, 0x840, 0x8, 0x2, 0xffffffff, 0xcce7, 0x1, 0x3, 0x7ff, 0x9, 0x2, 0x6, 0x8000, 0x40, 0x14e, 0x5a0138cf, 0x4, 0x1b7, 0x1, 0xfffffffffffff49b, 0x8, 0x4, 0x8, 0x3, 0x8, 0x1, 0x600000000000, 0x1, 0x800, 0x7, 0x10001, 0xfff, 0x6, 0x9b, 0x7, 0x0, 0x6, 0xe4c, 0x7ff, 0x1], {0x77359400}}) 14:21:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000080)={0x8, 0x1, 0x7084b148, 0x5, 0x8, 0x7}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) [ 380.310971] FAT-fs (loop1): invalid media value (0x00) [ 380.316367] FAT-fs (loop1): Can't find a valid FAT filesystem 14:21:29 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x534000000000000, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() r2 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) accept(r2, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) [ 380.392951] binder: 20916:20918 BC_FREE_BUFFER u0000000000000000 no match [ 380.419090] binder: 20916:20918 BC_FREE_BUFFER u0000000000000000 no match 14:21:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:29 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000080)={{0x2f, @multicast1, 0x4e23, 0x3, 'sed\x00', 0x8, 0x200, 0x2d}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4e20, 0x10004, 0x6, 0x6, 0x7}}, 0x44) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:29 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)) 14:21:29 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:29 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='task\x00') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000200)) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000080)={{0x2, 0xfffffffffffffc01}, {0x4, 0x6}, 0x7b1, 0x0, 0xff}) socket$key(0xf, 0x3, 0x2) 14:21:29 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x8, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) [ 380.626092] FAT-fs (loop1): error, invalid access to FAT (entry 0x000006c0) [ 380.633359] FAT-fs (loop1): Filesystem has been set read-only [ 380.644069] binder: 20936:20955 BC_FREE_BUFFER u0000000000000000 no match 14:21:29 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x1) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000180)=0x2) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000080)={0x21, 0x30, 0xb, 0x7, 0x0, 0x6, 0x1, 0xd3, 0x1}) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x40000, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x5, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000200)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x8b, 0x101) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080)=0x6e, 0x4) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:29 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/dev_mcast\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r2, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000000)=0x77) 14:21:29 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:29 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x3ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket(0x4, 0x6, 0xfffffffffffffff9) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) [ 380.835247] binder: 20965:20975 BC_FREE_BUFFER u0000000000000000 no match 14:21:29 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x7, 0x70, 0x1, 0x7fffffff, 0x1, 0x5, 0x0, 0x4, 0x200, 0x8, 0x2, 0x451, 0x7, 0x7, 0x2, 0x80, 0x7, 0x9, 0x5, 0x9, 0x100, 0x6, 0x4, 0x100000000, 0x0, 0x6, 0x6, 0xfffffffffffffff9, 0x0, 0x1, 0x400, 0x4, 0x5, 0xf6d1, 0x2, 0x72, 0xff, 0x10001, 0x0, 0x3, 0x5, @perf_bp={&(0x7f0000000040), 0x122563310158254}, 0x1604, 0x10001, 0x80000000, 0x0, 0x7, 0xfffffffffffeffff, 0x7ff}) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) [ 380.916988] binder: 20965:20989 BC_FREE_BUFFER u0000000000000000 no match [ 380.943229] FAT-fs (loop1): error, invalid access to FAT (entry 0x000006c0) [ 380.950496] FAT-fs (loop1): Filesystem has been set read-only 14:21:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:29 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:29 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x4000) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x2010, r1, 0x180000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:29 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=""/77) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, r2) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000440)={r3, 0x7, 0x382, 0x80000000}, &(0x7f0000000480)=0x10) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x7, 0x70, 0x7, 0x1d, 0x8, 0x9, 0x0, 0xc337, 0x42000, 0x8, 0x1, 0x3, 0x1, 0x81, 0x7, 0x4, 0xfffffffffffffffd, 0x6, 0x6, 0x4f, 0x0, 0x4, 0x2, 0xfff, 0x2, 0x4, 0x8, 0x20, 0xcf4c, 0x5, 0x80000000, 0x8, 0x800, 0xff, 0x4, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x2626, 0x2, @perf_config_ext={0x9, 0x1}, 0x200, 0x92, 0x5, 0x4, 0x7fffffff, 0xd97, 0xa5d0}) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x9, 0x8000, 0x6, 0x100000000, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000002c0)={r5, 0xc09c}, &(0x7f0000000280)=0xffffffffffffff3b) 14:21:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:29 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x1, 0x8, 0x81, 0x39, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r1, 0x6eaa28ce}, &(0x7f0000000140)=0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000200)) 14:21:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:30 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:30 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='veth1_to_bond\x00') fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000280)=0x4) [ 381.204395] binder_thread_write: 18 callbacks suppressed [ 381.204406] binder: 21016:21020 BC_ACQUIRE_DONE u0000000000000000 no match [ 381.238233] binder: 21016:21020 BC_FREE_BUFFER u0000000000000000 no match 14:21:30 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='[%GPLvboxnet0\x00') r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) 14:21:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) [ 381.310732] binder: 21016:21020 BC_ACQUIRE_DONE u0000000000000000 no match [ 381.349971] binder: 21016:21020 BC_FREE_BUFFER u0000000000000000 no match 14:21:30 executing program 7: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x8081, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000002c0)=0x4) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x8080, 0x0) r2 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x4010, r0, 0x33) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0xe4, 0x0, &(0x7f0000000440)=[@dead_binder_done={0x40086310, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340), &(0x7f0000000380)=[0x28]}}, @acquire, @request_death={0x400c630e, 0x4, 0x1}, @acquire_done={0x40106309, r2, 0x2}, @exit_looper, @request_death, @reply_sg={0x40486312, {{0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, &(0x7f00000003c0), &(0x7f0000000400)=[0x38]}, 0x2}}, @acquire={0x40046305, 0x4}], 0x28, 0x0, &(0x7f0000000540)="e69c6252cca8593ba2f63f167d23022d64d11e13063e1de7229bdbfa25cde48ee62cdc94eb3bf5e7"}) r3 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x1800000000000, @ipv4={[], [], @local}, 0x1ff}}, 0xff, 0x7}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000080)={r4, 0x10001, 0x6}, &(0x7f00000000c0)=0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09631040158b9e33e488c382d37cc0fd96bdaf5364ed7be900eb4d254e7e9c6b2a67b16cc2b4b42b5da8e6f87bc32bd2d4033340f6d754a91c12a8295a0c000058dc4d49181f831874c99949c4f1ba3e25e3014a", @ANYRES64=0x0, @ANYBLOB="000000000000000003630840", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) [ 381.509019] binder: 21054:21057 BC_ACQUIRE_DONE u82c388e4339e8b15 no match [ 381.516231] binder: 21054:21057 unknown command -377754268 [ 381.545761] binder: 21054:21057 ioctl c0306201 20000100 returned -22 14:21:30 executing program 3: clone(0x44000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00', {0x7ff, 0x4, 0xff, 0x9}, 0x22, [0x3, 0xffffffffffffffc0, 0x3, 0x0, 0xd, 0x200, 0x1f, 0x1, 0x6, 0x800, 0x1ff, 0x0, 0x800, 0xffffffff80000000, 0x7, 0xfffffffffffeffff, 0x5, 0x7fffffff, 0x200, 0x9, 0x11, 0x1, 0x5f11, 0x5, 0x3, 0x8, 0x0, 0x1, 0x20, 0x3ff, 0xfffffffffffffffe, 0xffffffff, 0x8, 0x4, 0x2a, 0x101, 0x2d, 0x2ef, 0xf3a, 0x6, 0x1f, 0x0, 0x7, 0x3, 0xaef, 0x80, 0x4, 0xfffffffffffffffb, 0x2, 0x3, 0x4b, 0x0, 0x7fffffff, 0x4, 0x0, 0x7f, 0x6, 0x7, 0x3f, 0x5, 0x401, 0x4, 0x0, 0x1000], [0x8, 0x100000000, 0xf5a, 0x1, 0x8, 0x4, 0x401, 0x3, 0x8001, 0xcc, 0x10001, 0x227, 0x400, 0x890, 0x6, 0x1, 0xca5, 0x9, 0xfffffffffffffff9, 0x7, 0x2, 0x91b, 0x1, 0x1f, 0x522, 0x8, 0x6, 0x80, 0x80000001, 0x3, 0x7ff, 0x5, 0xc316, 0x7fffffff, 0xffffffffffffffc1, 0x6, 0x100, 0x0, 0x9, 0x80000001, 0x20, 0x3, 0x8001, 0xffffffffffffffff, 0x30, 0x6, 0xffffffffffffffff, 0x100000000, 0x3, 0x3, 0x80, 0x10001, 0x400, 0xf3a, 0x4396, 0x10001, 0x0, 0x7946, 0xffff, 0x6, 0x2, 0x7fffffff, 0x0, 0x9], [0x2, 0xe0, 0x8, 0x1, 0x3, 0x5a7, 0x10000, 0x0, 0x1f60, 0x7, 0x458, 0x80, 0x80, 0x7, 0x101, 0x7ff, 0xffff, 0x9, 0x6, 0x5ecf5298, 0x0, 0xfa7, 0x8000, 0x5, 0x80000001, 0x3, 0x7, 0x1d7, 0x1, 0x0, 0x90, 0x1, 0x2113d712, 0x1ff, 0x5, 0x1, 0xfffffffffffff001, 0x1, 0x8, 0xe9b3, 0x240, 0x0, 0x60f0, 0x1f, 0x5, 0x2, 0x3, 0x147, 0x7, 0x6, 0xdf3, 0x80, 0x5, 0x8, 0x3, 0x0, 0x7, 0x8, 0x5, 0x0, 0x1000, 0x7, 0x3, 0x7fff], [0x10000, 0x8, 0x7, 0x40, 0x6, 0x8001, 0x401, 0x5, 0x100, 0x1, 0x7ff, 0x0, 0x7, 0xffff, 0x81, 0x7, 0x5faa9cbc, 0x8, 0x2, 0x100000001, 0x2, 0x7, 0x9, 0xc30, 0x400, 0x7, 0x80, 0xff, 0x2c0, 0x3a, 0xfff, 0x4, 0x0, 0xae76, 0xfffffffffffffff7, 0x955, 0x4, 0xef9, 0x2265fd79, 0x110e57b0, 0x2, 0x7, 0x2, 0xfff, 0x10000, 0x3, 0x3, 0x81, 0x3, 0x0, 0x34f, 0x6, 0xac4, 0x6898, 0x6, 0x8, 0x2, 0xfffffffffffffffa, 0x5, 0x9, 0x0, 0x1, 0x20, 0x2]}, 0x45c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r2, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:30 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x6, 0x400) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'sit0\x00', {0x2, 0x4e22, @multicast2}}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) 14:21:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x180, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x400000000002000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, r2) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) 14:21:30 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:30 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:30 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:30 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x1015, 0x0, 0xbb, "af46f657444b399368ee094b9d2a1a05", "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"}, 0x1015, 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x408200, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000140)) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000080)={0x0, 0x100000001}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) 14:21:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) [ 381.751254] binder: 21084:21087 BC_ACQUIRE_DONE u0000000000000000 no match [ 381.768586] IPVS: ftp: loaded support on port[0] = 21 [ 381.784155] binder: 21084:21087 BC_FREE_BUFFER u0000000000000000 no match 14:21:30 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) r1 = socket(0xf, 0x5, 0x2) fchdir(r1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x4, 0x7, 0x200000000005, 0xfffffffffffffffc, 0x7, 0x1a60, 0x5, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={r2, @in6={{0xa, 0x4e22, 0x800, @remote, 0x80}}, 0x669ff610, 0x1, 0x1, 0x4, 0x4}, 0x98) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)={0x1, 0x7f, 0x6, 0x1400000000000, 0x9, [{0x800, 0x3, 0x200, 0x0, 0x0, 0x2200}, {0x1, 0x4, 0x1, 0x0, 0x0, 0x200}, {0x375e, 0x4bd, 0x52a, 0x0, 0x0, 0x2200}, {0x7, 0x3, 0xb9, 0x0, 0x0, 0x2002}, {0x1, 0x5, 0x3, 0x0, 0x0, 0x800}, {0x3, 0x8, 0x9, 0x0, 0x0, 0x802}, {0x7, 0x4, 0x6, 0x0, 0x0, 0x2800}, {0x5, 0x100000001, 0x40}, {0x3, 0xfffffffffffffffb, 0x10000, 0x0, 0x0, 0x800}]}) 14:21:30 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) fdatasync(r0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x101000, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r2, r3}}, 0x18) 14:21:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:30 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x1, 0x5a, 0x4, 0x8, 0x0, 0x1cff, 0x20, 0x2, 0x1, 0x2, 0x2, 0x3, 0xffffffffffffff3d, 0x7, 0x22, 0xfff, 0x8, 0x4, 0x7c2, 0x8, 0x7, 0x1, 0x42453bd9, 0x7fffffff, 0x7fff, 0x3, 0x10001, 0x2, 0x6, 0x400, 0x7, 0xffffffff, 0x1000, 0x8, 0x1c86, 0x4, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x5, 0x7fffffff, 0x7, 0x5d, 0x6, 0x4}, r2, 0x1, r0, 0x9) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) 14:21:30 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0xa100, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback, [0x0, 0x640000]}, 0x10) [ 382.035930] binder: 21111:21114 BC_ACQUIRE_DONE u0000000000000000 no match [ 382.068295] binder: 21111:21114 BC_ACQUIRE_DONE u0000000000000000 no match [ 382.279329] IPVS: ftp: loaded support on port[0] = 21 14:21:31 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) write$P9_RWRITE(r1, &(0x7f0000000000)={0xb, 0x77, 0x1, 0x9}, 0xb) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = accept4(r2, &(0x7f0000000600)=@alg, &(0x7f0000000680)=0x80, 0x80800) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000006c0)={0x0, 0x1}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000740)={r4, @in={{0x2, 0x4e23, @rand_addr=0x80000001}}, 0x6, 0x3, 0x0, 0x10000, 0x12}, &(0x7f0000000800)=0x98) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) accept(r2, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = accept4$inet(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x800) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000200)=0x3, 0x4) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000080)) 14:21:31 executing program 7: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0), &(0x7f00000012c0)=0x4) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x200, 0x40000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="3c00000070dc668e4e52442a4fb70817c3ddf451aab60b437464be5935a73873780db1be9036563a88b8393eb9e63d2d139025f4f26f2db0f6ec332e544e8ad800b8928e05a8e0254699b30cb7ae9430d94a124d7c95f71e0df53390745edf27f7950da30a63db6dba82f2954cb2c855d1c73d0ea3dfc59c1ea553f94eb3bedd190000000000007c000000"], &(0x7f0000000140)=0x44) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r2, 0x5}, 0x8) r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000002c0)=""/4096) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6f1554d5918a3d39a4d28db270f6", @ANYRES64=0x0, @ANYBLOB="000000000000000003630840", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000080)={'bpq0\x00', {0x2, 0x4e22, @multicast2}}) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:31 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:31 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:31 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0xa100, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback, [0x0, 0x640000]}, 0x10) [ 382.423275] binder: 21142:21144 unknown command -715909777 [ 382.447522] binder: 21142:21144 ioctl c0306201 20000100 returned -22 14:21:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000087ffffff, 0xd7c) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 14:21:31 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, r2) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x2) 14:21:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:31 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x400, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x106, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r2, 0xa8, "082c1c", "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"}}, 0x110) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xa4, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x20, &(0x7f0000000040)=[@fda={0x66646185, 0x6, 0x1, 0x3d}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x8}, @fda={0x66646185, 0xa, 0x4, 0x3e}], &(0x7f00000000c0)=[0x78, 0x78, 0x78, 0x0]}, 0xbae2}}, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100), &(0x7f0000000140)=[0x0]}, 0x3}}, @dead_binder_done], 0xf2, 0x0, &(0x7f00000002c0)="67a7f1aaab2e88c24fd9d7497abe045d1e49f0fe38c529db26a8502d22378e5257f3ffbef4a11b829f258a2bda4565bfabea6a4c189912d76266c33623891b443d2dfc37ce619ffe31993fd64a8393f5584d153f6f48a371e492ffd60ac8e28961ff08fb3dcd97d39883624cad5332e99882789a674052aa8289f6816142f3d0bf5433952a7d6326584c0e7040f50a03272a118baaa27a74dda652a3a4f1c1739f4691426b32a583e0205ab7e4a113f000dab5b9dcfc7baa2ac5dcf44e04505cf82338c1fddd4ccf6df6c703d701ddda86396e490e3ba99815e5d787d251d2ff93510b727bdc78e920625375770ffa8b81ec"}) 14:21:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x480440, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000140)={@local, @rand_addr=0x4, r2}, 0xc) 14:21:31 executing program 2: io_setup(0x100, &(0x7f0000000140)=0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) io_cancel(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x200, r1, &(0x7f0000000200)="7d04ce35c7091b35c26270a0745becf90658a94575b992fc2dcf96761253b3cd0baed51cc7563c33e02892352d9af3b4451a3a42175b4d8abd304ee8aa149c5b45e3841aba562dbf4aa355d9df54213046469ef66d48abc16332c7c5995b7eacddfb7a7a8d3705dd3059caccd764ac716f500b6f97d99dfab16070f435821c753a9faa44d7ed4184f58688936b1de31a558bf62186eef8864c29f40fc62c265fd3bfbc04966efa49583a1a5dcf72be8e0124a76882041ad9d6ad7ce49c579c3a03f5c04e1f3042cfd9fde16ace37c9a0d5668ca56c01ece6030d4b820fdb427153f80852e5", 0xe5, 0x9, 0x0, 0x1}, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0xeaf0, 0x3, 0x7, 0x100000001, 0x7, 0xff, 0x7, 0x1f, 0x40, 0x5}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000000100)=0x1) ioctl$LOOP_CTL_REMOVE(r2, 0xc0045878, 0x0) [ 382.653251] binder: 21179:21181 got transaction to invalid handle [ 382.659623] binder: 21179:21181 transaction failed 29201/-22, size 104-32 line 2855 14:21:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 382.719874] binder: 21179:21186 got transaction to invalid handle [ 382.726271] binder: 21179:21186 transaction failed 29201/-22, size 104-32 line 2855 14:21:31 executing program 2: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) 14:21:31 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(0xffffffffffffffff, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) 14:21:31 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09581048", @ANYRES64=0x0, @ANYBLOB="000800000000000003630840", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8580, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000002c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, @in6={0xa, 0x4e22, 0xb0, @empty, 0xfffffffffffffffe}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @broadcast}], 0x8c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000200)={0x0, 0x5, 0x8, 'queue0\x00', 0x9}) 14:21:31 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:31 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) [ 383.071486] binder: 21206:21216 unknown command 1209030665 [ 383.088266] binder: 21206:21216 ioctl c0306201 20000100 returned -22 [ 383.096414] Unknown ioctl -1064545484 [ 383.104216] binder: 21206:21216 unknown command 1209030665 [ 383.122571] Unknown ioctl -1064545484 [ 383.128728] binder: 21206:21216 ioctl c0306201 20000100 returned -22 14:21:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000080)}) 14:21:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) prctl$setendian(0x14, 0x3) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0xfffffffffffffc01) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, r1) 14:21:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x2280, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0xee, 0x1, @scatter={0x1, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/42, 0x2a}]}, &(0x7f0000000200)="2c69a4ec87c058bd659f59ad213ee8108a240d59805accc958e7b28fbfbf7f5051c7271e2e99cde1b29bbf32fa2aeac8c15fdbaa8aacda0ada58c97deaac5c735f8ce854ae5b6d611bafc341b6e382d56a956078eb5192ba0ef1e79b6830ecf3a6bfe1c151a1a50e8535de0f1f38462b059126da837bc3812b38a84f1b8a41fe9e7a44aaa63be8b6c1b5e01df37835ce5568d3a5f5b5a6244dee5122b5336e519bf95e5be5e9e102eb56a126fd70df940cc7f588089659b30fff97f42ffa4de4c35ee75be1d2be0ef6e614e37e1115f4ce969f4755eeaa360a0eb25e06b00745d75b1e66555775f2bbb68a3dbe44", &(0x7f0000000300)=""/70, 0x401, 0x4, 0xffffffffffffffff, &(0x7f0000000380)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) keyctl$join(0x1, &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}) 14:21:32 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfdd9, 0x0, &(0x7f0000000040)}) 14:21:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:32 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:32 executing program 3: clone(0x20000400, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/216, 0xd8) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:32 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) [ 383.406239] binder: 21241:21252 unknown command 0 14:21:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800)='/dev/hwrng\x00', 0x30000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000010}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xd4, r1, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x21}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000000}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffff80000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xa}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xaa5f}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r2 = getpgrp(0x0) r3 = syz_open_procfs(r2, &(0x7f0000000500)='ns\x00') syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x7, &(0x7f0000000740)=[{&(0x7f0000000200)="f523d22fde920eae99399e1a07fe990089b36f71d07e9639720fcca861387d84bd68c225edb4c62149e6aff9fa6e8fdf660806ea8295d3179e1a15a3c7532a909f159dac3f36bd2bde5e9a67afb5eca7f61aa6d9fd4b7eb21b2d94fbda786792bf5713d3fa83928e82a1e3e0b4302af72ddf7104b94f1a477b65cd8b0ed6e54bc72f52395e679a528585209464e2b106dec3849bd0cb0fbb343c17d86cbcb35c226a1d7f3acb1cbc2cd5ff2177a43a81c73f3d496050fec6c43d4091501da677a323309974f8c1cafd5eeb0f558b818fdd256d6ad75f228335425524aac736b59496d14e3bd4406b35a836b6740e96c7fb", 0xf1, 0x9}, {&(0x7f00000000c0)="3ba389681220fb487d143c0f4faf99588a8fb3145ac916d7628e3a6bcca6b472e1f987b7bcf375f9f1a85fb423f478c37b9746e335fba892b6d0b8ef6b462dee6d4ea1e6ecb53c88ce38472fa9695575861259fbc915f374837ad2ff74a731005cb0bbd79e7d77d97e0c6b", 0x6b, 0x101}, {&(0x7f0000000300)="49046b037e8097562acbc108a7a3fd57bf32273ec89645929d3143f08631eb9cc017ed677d558b6fa1fe4fd766fe3c4f34e2e4bbe68b9a7045c32a38b9c11b46e7c560ad9f84a61210a4a6551d086e5775c1543556745d5260b20b14741e09469d9e026bfba5b8f75d61f1a17e91d6e7bc4e1ec1049db4c7269a8b0cb66552278dc91729719ee259ebb22127ab70a38e5227b07510fbaa94380022afda5b01b8faa97246e4bbad826a36887be213e4c634ab89f7df46833efd6fc57f1b8a1368cd8bae82cff41abfc6e1c5470d8413b92da3bdabdc157efcd1f6b9e158d1afaaa79ca05969671f22b4ae339831b0dd", 0xef, 0x9}, {&(0x7f0000000400)="a9b1918255cb3afbcbc2d5387e008ced7d3cf72875b523bd34eb27c789296b40a6840af1ed0bee579cf8c64f128e46ce80c8287148e10a9bd5b3f0eba88d7d1b02caa65f292e360066ec042089dad58d6597bcc375", 0x55, 0x40b}, {&(0x7f0000000140)="b357a196", 0x4, 0x71}, {&(0x7f0000000680)="b88214c87816a17af9877a42a9171d82eac99a4ddf175ef8b376279f263aca6d54fc84883884923655c048ce3ebfe441253a938f1d1c24076e4dfdab921b328da877b54d440be536c7e7ed1aed51d6a12015691554227b2c0085dace223951b53b661d4db15b9e20f3fbc270afbd3004404219a0435593064dfbf0433b87c8c36ab815b196cd40f362f485e23ac1cba2e51e6da6766fd14d06bd27e4c4378f", 0x9f, 0x8}, {&(0x7f0000000480)="5746f537c5c1b287b54a3170a8eba1a13070ebf14c69a16ae6d0593ff9233011ca38e05b5a903d88ad02d7e0c78dfd2a317de6cff463979fc9e35f2b07501a7671d76086def1d7056a7cfa08e64106f7d3ffd766d2ef3d06fa2952d5a09c09826d58acdbccf458a755afdd80185a5a1647e56a7fb9", 0x75, 0x400}], 0x2a20000, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000a40)={0x7, 0xa0d7}) sendto$llc(r3, &(0x7f0000000580)="3ef7953e705c5a4d2af39bebc1404257d13e7618205c73de7ef614d06866209977f3d53eb586cf35091782318e5c1c689fe83d1379b72e9f7e010ae0add6ecaaf25f29fd8ddf2e0f58a4fa43613cf4916adb3860dc99575349b0fad5ad1d141652bb16ae5acb060b4ee5c4840295c6c4ecf8e0b49377fcadf9934074c08e59bbc22cea32300fd2691e4ff2bc0a4b879c774de73f3bfb579cb2a1df490041bfb7b2de8e6e205e2e9297514a9b3d99455be6d8e28988551320", 0xb8, 0x24000000, &(0x7f0000000640)={0x1a, 0x32f, 0x7, 0x0, 0xffffffffffffff80, 0xffffffff, @local}, 0x10) 14:21:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/119, 0x77) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)) [ 383.430195] binder: 21241:21252 ioctl c0306201 20000080 returned -22 14:21:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:32 executing program 7: io_setup(0x0, &(0x7f0000000000)=0x0) io_destroy(r0) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 383.574801] binder: 21272:21275 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:32 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[{0x8, 0x2}, {0x2, 0x476}, {0x3, 0x6}], 0x3) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@remote, 0x4e23, 0xa88, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x7e, 0x0, r1}, {0x6, 0x1, 0x0, 0x7, 0x8, 0x700000, 0x400, 0x1}, {0x63a, 0x80000000, 0x5fcf, 0x1}, 0x32179820, 0x6e6bbb, 0x3, 0x1, 0x1, 0x3}, {{@in=@local, 0x4d5, 0xff}, 0x2, @in, 0x3500, 0x7, 0x2, 0xfffffffffffffffe, 0x655, 0x2}}, 0xe8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x401}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0)={r3, 0x3}, 0x8) 14:21:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040), 0x7, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:32 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) [ 383.739889] binder: 21297:21298 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:32 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) restart_syscall() openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)="dc81740086797013fb6947ba414fe2f808b1189afeb176c6f2c27c56e83d455186b04f8be84fcb4a230b7b73f8cb54acb33a21b11aa335fb0511f50b435449cd37a223743ad0f6ff56d222e07c46eb8cf45fd4d8044bfa7c51a43421b3273f0d3720227bad6dd1cb913c977258834827fd4767a64521c9d943db62f97624aa7896a13024e57600281a5176932a81d72efad4905061b8eb59473d7c54697e7f5915d1d462524e1ea0a6879b21b7a821d960eae57a77b47894cc18de89232f10d37083553311a8fee8846b8e305e5e391d0df6dc3ae5f3af82fd46b5eb17c1af6937928949326a8d9b9f8160d7283323c3387f5731", 0x0, 0x0) syz_read_part_table(0x0, 0x0, &(0x7f00000009c0)) 14:21:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:32 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000080)={0x10004, 0x18000}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 14:21:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x7fc, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000080)=0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:32 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:32 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x1c3339d5f7b39e3c, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000500)={0xfffffffffffffffb}, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0xa4, r3, 0x301, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffa}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x60e8000000}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb06a}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x22e6097c}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x400) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x4e21, 0x8, @empty, 0x80000001}, {0xa, 0x4e21, 0x6, @local, 0xffffffffffffde5c}, 0x7, [0x2, 0x8, 0x4000000000, 0x0, 0x7ff, 0x3, 0x47c6, 0x3f]}, 0x5c) ioctl$TIOCGPTPEER(r4, 0x5441, 0x4) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='/dev/midi#\x00', r4}, 0x10) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000180), 0x0) setsockopt$inet_dccp_buf(r4, 0x21, 0x8f, &(0x7f0000000540)="cf84b8e64ae8341f492dc569f998f7aaa909639edd820d6b633b40cd0d340f2e717babd2a055c1607bb0d6ce70866634687e10c4b849edcb4b27219570cdd72a99805e476b81c0d21daad7e3da3a66cc69e3382a2bb39098e97dab112aaae6caedc0f6bd88e82ec7624351afcab4105d909fb2e4075bb3a583cc314f4bbe6fb3fe02ca050d0a0fdc8c35d0e1452abe200ee59e50b0e52fadc669204a61ec383a7c850da14fd8af01801f72c89ac85acf822cbd395f316c28993c68c6d04fe6f216954ef549df6a417c20af64d00ac9a5edb0ae9ce9cbed058231588a95f910d8a4eb90a18fb076edfa", 0xe9) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r2, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:32 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="29631040", @ANYRES64=0x0, @ANYBLOB="000000000000000003630840", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa0005}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) write$vnet(r1, &(0x7f0000000440)={0x1, {&(0x7f00000002c0)=""/61, 0x3d, &(0x7f0000000300)=""/159, 0x3, 0x4}}, 0x68) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10002, 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000080)={0x4}) 14:21:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xe9, 0x402082) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x8001}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x10001}, 0xc) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 14:21:32 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f000000b580)=[{{0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f00000026c0)=[{0x10, 0x88}], 0x10, 0x20000004}, 0x2}], 0x1, 0x0) 14:21:32 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x66) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x200, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) 14:21:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:32 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) [ 384.093096] binder: 21337:21339 unknown command 1074815785 [ 384.113552] binder: 21337:21339 ioctl c0306201 20000100 returned -22 14:21:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:33 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) 14:21:33 executing program 2: r0 = accept$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f00000000c0)=0x60) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x1, 0x0, 0x0, 0x0, "5c343269f86f5926739705af6f0b3b0164c571c03527c34ce14758ec4c54b5bd2b70f29b21cf4805b24cc354ff6e5fbbd9b22ee2b3b4029fb79d97623b41c5", 0x1e}, 0x60) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0xc0045878, 0x0) 14:21:33 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x100000001, 0x140) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000200)=""/175) pipe2$9p(&(0x7f0000000000), 0x800) [ 384.154111] binder: 21337:21339 unknown command 1074815785 [ 384.173715] binder: 21337:21339 ioctl c0306201 20000100 returned -22 14:21:33 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, {0xa, 0x0, 0x0, @mcast2}}, 0x23f) 14:21:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x9, 0x644}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 384.321557] binder: 21374:21380 BC_ACQUIRE_DONE u0000000000000000 no match [ 384.333610] binder: 21374:21380 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x3a5c, 0x5c7c, 0x4, 0x2, 0x4}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e22, @loopback}}, 0x5, 0x0, 0x858, 0x8, 0xc9}, &(0x7f0000000080)=0x98) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 14:21:33 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000040)={0x7, 0x4, 0x2463}) 14:21:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 14:21:33 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80, 0x0) getpeername(r1, &(0x7f0000000080)=@can, &(0x7f0000000140)=0x80) 14:21:33 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1ff, 0x44600) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0xffffffffffffff81, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000000c0)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) close(r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0xc0045878, r4) 14:21:33 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:33 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000200)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x476, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf, 0x1f, 0x2, 0x7fff}, 0xf) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000100)) 14:21:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xfeffff0700000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000300], 0x0, &(0x7f0000000000), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'ip6gre0\x00', 'vlan0\x00', 'veth1\x00', 'ip6tnl0\x00', @random="c201c9a511d3", [], @random="8d89a2f47b85", [], 0x70, 0x70, 0xd0}}, @common=@redirect={'redirect\x00', 0x1d}}]}, {0x0, '\x00', 0x1}]}, 0x1a8) 14:21:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000006, 0x1) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x42000, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) 14:21:33 executing program 7: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x842c0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080)=0x7f, 0x4) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000040), 0xef, 0x0, &(0x7f00000000c0)}) setsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f00000000c0)="03fc5a723dbaf2af6546eff2ab5468b0f46a342bdb2a829bd2f1b2651effc03e9304c22da577411c4f39e26f9c8570c6e251707cf2272f5b21c7c764560381753e9e6cb4b5599a3952d76ca70d65efb474af648248", 0x55) syncfs(r1) dup3(r1, r1, 0x80000) 14:21:33 executing program 1: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000300)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x5c) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERRORu(r0, &(0x7f0000000000)=ANY=[], 0x0) [ 384.715392] x_tables: eb_tables: redirect.0 target: invalid size 8 (kernel) != (user) 29 [ 384.796123] binder: 21438:21440 unknown command 0 14:21:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 384.816351] binder: 21438:21440 ioctl c0306201 20000140 returned -22 14:21:33 executing program 1: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000300)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x5c) r0 = socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) write$cgroup_int(r0, &(0x7f00000000c0)=0x2, 0x12) [ 384.883929] binder: 21438:21440 unknown command 0 14:21:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1001000000000002, 0x81) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x4000000000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) write$FUSE_LK(r1, &(0x7f0000000140)={0x28, 0x0, 0x8, {{0x5, 0xffffffffffffffcb, 0x2, r2}}}, 0x28) 14:21:33 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="b7bd2fe403b9d624766dcb1f872514e71831a74123b31bdee336bce298b01842b2ed79d6d0e3ad27b25071d9dc9c84408874b952d0747623990f73f486e8a99b1f310225b741640872c5", @ANYRES64=0x0, @ANYBLOB="000000000000000003630840", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) [ 384.911137] binder: 21438:21440 ioctl c0306201 20000140 returned -22 [ 384.991055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=21459 comm=syz-executor1 [ 385.039194] binder: 21462:21464 unknown command -466633289 [ 385.065392] binder: 21462:21464 ioctl c0306201 20000100 returned -22 14:21:34 executing program 3: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080)=0x0) write$cgroup_pid(r0, &(0x7f0000000140)=r1, 0xfffffffffffffd1b) clone(0x2800002, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r2 = getpid() socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@loopback, @broadcast, 0x1, 0x5, [@remote, @rand_addr=0x7968, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2]}, 0x24) 14:21:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:34 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:34 executing program 1: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001600)='syz0\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, 0x6e) bind$unix(r1, &(0x7f0000366000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r2 = accept4$inet6(r1, 0x0, &(0x7f0000000100), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000000)=0xc) r3 = add_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f00000002c0), &(0x7f0000001640), 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, 0x0, 0x3, r3) dup(r2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x12) 14:21:34 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x200003, 0x0) getsockopt$inet6_int(r0, 0x29, 0xe17a56cf92e3054d, &(0x7f0000000740), &(0x7f0000000200)=0xffffffffffffff1c) write$binfmt_script(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="2321202e2f66696c65302073797a30002024212627217070703163252b202073797a3000202f6465762f76090000007262697465720020242e2c200a490082db446d2de4f3a0727b9425efdddfdd302d5187202c2d554b61ac77b68e244ac58052e9e3887b50d71c95d9a72700000000"], 0x3bd) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x1, 0x20, 0x0, 0x3}, 0x40, [0x4, 0xfffffffffffffff7, 0x4, 0xfff, 0x1, 0x5f7c, 0x6, 0x9, 0x100, 0x80000000, 0x1, 0x100, 0x1, 0x0, 0x9, 0xfea9, 0x81, 0xffffffff, 0xfdf, 0x8, 0x8, 0x2, 0x9, 0x4, 0x15c00000000000, 0x6000000, 0x0, 0x0, 0xfffffffffffff5d6, 0x80000001, 0x100, 0x4, 0x8, 0x200, 0xfff, 0x7fffffff, 0x4, 0x7fff, 0xffffffff, 0x1, 0xffffffffffffffb1, 0x4, 0x9, 0x3, 0x5, 0x3385, 0x20200000, 0x6, 0x0, 0x8, 0x5, 0x4, 0x8, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x5, 0xc6db, 0x3f, 0x1, 0x1, 0x9, 0x3, 0x2, 0x7], [0x7fffffff, 0xfffffffffffff000, 0x6b, 0x5, 0x2, 0x2, 0x40, 0x1, 0x6, 0x3174, 0x3, 0x2, 0x1ff, 0xfff, 0x1f, 0x3, 0x6b2e2ac, 0x9c, 0x7, 0x40, 0x6, 0x100000000, 0x6, 0x7fd3, 0x7, 0x5, 0x100000000, 0x4, 0x6, 0x9, 0x0, 0xf2, 0x7, 0x3ff, 0x3, 0x543, 0x8000000000000, 0xffffffff, 0x4, 0x1, 0x8, 0x10000, 0xf562, 0x8, 0x3, 0x8b12, 0x3, 0x5, 0xfffffffffffffffd, 0x1000, 0x200, 0x4, 0x46, 0x8, 0x13d, 0xf, 0x3f, 0x4, 0xc, 0xffff, 0x3, 0x101, 0xfffffffffffffff9, 0x8], [0x3, 0x9, 0x4, 0x400, 0xffff, 0x81, 0x7, 0x400, 0x6, 0x1, 0x74e, 0xa73, 0x2, 0x5, 0x52b00000000, 0x8, 0x80000000, 0x40, 0x0, 0xa3, 0x7, 0x1, 0x6, 0x8, 0x5, 0x6, 0x200, 0x3, 0x8000, 0xffff, 0x0, 0x7f, 0xffffffff, 0x8, 0x5, 0xac4, 0x10001, 0x400000000, 0x9, 0x5, 0x4, 0xfc, 0xffff, 0xffffffffffffffff, 0xfff, 0x569e, 0xffffffffffffffe7, 0x8, 0x7fff, 0x3, 0x9, 0x7, 0x18, 0x1ff, 0x6, 0x5, 0x6, 0x101, 0xfff, 0x9, 0x2, 0x100000000, 0x8, 0x6], [0xe25, 0x1, 0x0, 0x6, 0x71, 0x1, 0xa73, 0x14000, 0x3, 0x8, 0x1000, 0x1, 0x6, 0x5, 0x80000000, 0x3f, 0xff, 0x4, 0x3, 0x8, 0x49, 0x6c, 0x6, 0x401, 0xe418, 0x9, 0x3f4c, 0x80000000, 0x4, 0x9, 0x100000001, 0x7, 0x9, 0x8, 0x0, 0x8, 0x8, 0xffffffff00000000, 0xfffffffffffffffc, 0x5, 0xffffffffffffff00, 0x3, 0xc95, 0xfffffffffffffffb, 0x8, 0x0, 0x10001, 0x5, 0xff, 0x2, 0x6, 0x4606, 0x80, 0xbc, 0x6, 0x4, 0x7ff, 0x3, 0xffffffffffffffff, 0xb0e, 0x81, 0x3d1, 0x10000, 0x7fff]}, 0x45c) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000840)) getsockopt$inet_opts(r0, 0x0, 0x7, 0xfffffffffffffffd, &(0x7f0000000140)) bind(r0, &(0x7f0000000040)=@in={0x2, 0x4e20, @remote}, 0x80) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000007c0)={0x0, 0x3146, 0xd1b, &(0x7f0000000780)=0xffffffff}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x40000, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose='cache=loose'}, {@nodevmap='nodevmap'}, {@cache_fscache='cache=fscache'}, {@nodevmap='nodevmap'}]}}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000880)) 14:21:34 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:34 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:34 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000080)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000340)=0xe8) r3 = geteuid() getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) r5 = getuid() r6 = getgid() r7 = getegid() stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x7}, [{0x2, 0x6, r1}, {0x2, 0x6, r2}, {0x2, 0x2, r3}, {0x2, 0x1, r4}, {0x2, 0x7, r5}], {0x4, 0x7}, [{0x8, 0x0, r6}, {0x8, 0x7, r7}, {0x8, 0x1, r8}], {0x10, 0x2}, {0x20, 0x5}}, 0x64, 0x3) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r9, 0xc0045878, 0x0) 14:21:34 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000280)=0x5) 14:21:34 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="00000000000000000363084007f3010842f8c264ea037070d70d3ccff46803b55e2968e36c47598001b5fecc43912e31ede37a953b55c978465eca041ba4fd92de4513a92a19e6ff2ca16a26a39c1ddc60c1c71e3265b4174df8c4ca7873100d0c0f600b91becfc4403fb7088161be97138bd05c682bbfc4dc99430f5a69d210b5dd03312076877b12f86ea6b783d49915850edb5aeb10916c7a9914647e7f4640853da54fd76a0c57f317ec", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400400, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) dup3(r0, r0, 0x80000) 14:21:34 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x4001, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000b00)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x5be, 0x3}, &(0x7f0000000780)=0x90) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000007c0)={r5, 0xef7}, &(0x7f0000000bc0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000900)={0x1, 0x9, 0x4, 0x9d8, 0x0, 0x0, 0x7, 0x8}, &(0x7f0000000940)=0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000980)={0x0, 0xec, "d89c337a9faf5dd364797b18af75520e36ac11e461e925038160ae48f674c3af7578118abe9a6b5dc4eb071088aafb08ce183b5a0fed569b33a6b26bff36115f60d08659448d4396b22290f1f7b1ede84a4669308120a926f6b07786d962fab4e14ab075448ece270c95fc572055185799c060233db5dda03da1c4f74bb6b558c0557a8aef733eb17cf26fd2c7f24baf15be60ea5f76d911a7a5c252243db4a52698260b6dda085a7610488a22f5bec16f887831f61fe800cda27132db6adfb0ab581721512d4658cf89d91af345c513ccf5fe0c4c3d2f369ffbc172891f7c9bb713bf1d7d28187b252a13c4"}, &(0x7f0000000a80)=0xf4) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000ac0)={r6, 0xa5a, 0x7fff, 0x8}, &(0x7f00000008c0)=0x7) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000800)={r7, 0x40, 0x99, "be47ca8985db88e7e32dad9413c0c18b6189b57ed453dff4d30b9eaa0f5e77edc21cabde8be81cf97ffb26b9474cb69f85892ce987450f9734ef5f74e1cf67e60b23cb6146eda76b5ee0764ce7f3e2dbb7570ee201dadd04e5379096f861d1782b6a62264a2f0fbfa55fe98588694bbb49d39151f561fcce2da8abddb3ce7ec735026dbe2a855b864411a8124dbc99e17735c3ba2acb4e90df"}, 0xa1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/qat_adf_ctl\x00', 0x602040, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000700)) write$P9_RSTATu(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="990000007d0000007a0003000200000001040000000300000000000000000000040800000003000000e1ffffffffffffff12002f6465762f6c6f6f702d297b266e6f646576656d31766d6e65743065746831e32d6b657972696e6712002f6465762f6c6f6f702d636f6e745f5f636c5f61636365737300000000ff7f00000000000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4], 0xa0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0xc0045878, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1f, &(0x7f00000006c0)=0x6, 0x4) r9 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4, 0x20800) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0xffffffff, 0x0, 0x6, 0xc5e4, 0x10}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000200)={r10, @in={{0x2, 0x4e21, @multicast1}}, 0x9, 0x2, 0x86, 0xbe2, 0x14}, &(0x7f00000002c0)=0x98) 14:21:34 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0xfffffffffffffffd, 0x0, &(0x7f00000024c0), 0x100020, &(0x7f0000000080)) 14:21:34 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 385.473257] binder_thread_write: 8 callbacks suppressed [ 385.473268] binder: 21511:21516 BC_FREE_BUFFER u64c2f8420801f307 no match 14:21:34 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x88f5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 14:21:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x80000, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000080)={0xfffffffffffffff7, 0x5, 0x1}) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) [ 385.541313] binder: 21511:21516 BC_FREE_BUFFER u64c2f8420801f307 no match 14:21:34 executing program 7: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x100000001) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x4, 0x1, 0xffffffffffffffff, 0x6, 0x2, 0x2, 0x9, 0x6c6d, 0x1, 0x6, 0x0, 0x7}) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) [ 385.770962] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue [ 385.839672] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue 14:21:34 executing program 3: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x2) clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000040)) accept(r1, &(0x7f00000000c0)=@nl=@unspec, &(0x7f0000000400)=0x1e6) 14:21:34 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 14:21:34 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000780)=@assoc_id=0x0, &(0x7f00000007c0)=0x4) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000800)={r1, 0x2, 0xd7, "62e1a178b00b40aa98a46788f3c4a66f39b6994d6ac2eaa33ab0faa5c97167ae1b0bdf8173de8645588f45ff9fa7512e93fb9778da38a231089a03abf08a0be7af739953fa23d56fa328367f6f1debd14a40b61f0879445d9ed4887c79775535925d0eb670e14bb97d56fd2c32bad13928914c9f223a4b74719babfc43922489b8b868025e357f1c7b18644691b2d3c878fd0a0a05e8bcad2f60ca821cc9be7ba1b71f54ae7c32948d8a89d69f2bbd00aaade527ebc601df8f12bfc9d3fe93e1fc4517accfe0112e02c1d925c037982342ffcd88b0d732"}, 0xdf) sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000100)="1a95cd", 0x3}, {&(0x7f0000000200)="72890b0474d8afb3027c00cfe36f7423eba1533b23e41537f96194c06b1722b1ef4d7ddbe0daa27e70052f7b867896ada28d48ab986d928a5c5444c2fb40f6a8a9ee146b93d267a9844896ec8ec417870bdb215a017903cf1e6c3e9b4841d177fb47f3aaedd85ac0cbdbf653b951ff012b0bc617f9d69711b00038e612b37df1d14fd375f0148e79f78dc341b0c8f06116e37fea120c621944e9b392b3687e5e2636bb3225eb4e9c02d120fe0c07bb409c9d2315877211bfaeaf65c81047159b34323bf818b74082c94f", 0xca}, {&(0x7f0000000140)='\\ej', 0x3}, {&(0x7f0000000300)="bd1c55664eb512ce831a197c399a3622bb14a49e02f7d6d7bf31bbce698795bb29ce00986f7d46f54e3a2b93fc1975fda24d43594a73ddb8fbe07d31bc5940b1189a7130d0081ad499904493b1d8c94190dce8db60edaeb95516e6a111252dfef9ce50ad6970bbb44439e763f5237b9ff0505ac0b7c810fa6b5b224c6483b1488a7bdb5c899f4209057406f60da7f3dbeefc73abde39fd1de9f45f6223a541a0c234c7f34e0590efc248b75e4c3e5a426513bb4921302c9bf0fad2d1fa1aeacaf9a003d8d09deadfb6767cfd8c", 0xcd}, {&(0x7f0000000400)="93d65ee6d40def74d7224709a9fcf312ac5444", 0x13}, {&(0x7f0000000440)="1f3c7f158afdce9e93c680fedc76125251af08127c1a855ea70dbd4ecd457e4b49b1c995dbe5ddebd26f080eef787155", 0x30}, {&(0x7f0000000480)="997e0b77cf11b8a7760066a2361e47ac01d1a80eb938a3b322de39f5c60faa2b7f75769f35912d079ad998e4090e6903d68bff1e2c5271ff6e607c4796bc1cb2bbb9f17239613733c3dfa9a1d94c0feec93ae0f3379bd86fa0461c067574af77a7b4e02fcbce196bc2c16ba3bae2a6c727d3ecbeee8fb6bd632b8f5e069f12ed75e82ae2affa2effd312aba540cebe88", 0x90}, {&(0x7f0000000580)="5170231d819dd7456353340b763ade64", 0x10}, {&(0x7f00000005c0)="05dad2a646a57575ef9731f17a7ae92f555dcb07ad5c1834d66d7a8d040967a328150cd92e04404b8abd18f4bf04f0f09e0085af047a162673f5d1148b28da64abc05796ee27128b37c2bb906eecd5321dfdd1dc473d0c0f8a6291863dfbc06abc82157009bd5b08eee7f918dd31ae8a44de93c49c6973571c54b4bc1145acdd4d2b26349ee7a5", 0x87}], 0x9, 0x0, 0x0, 0x4000}, 0x4004) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, r3) 14:21:34 executing program 7: getresgid(&(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) setfsgid(r0) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x1, 0x80) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000006c0)=0x2, 0x4) timer_create(0x2, &(0x7f0000000140)={0x0, 0x2e, 0x0, @thr={&(0x7f0000000200)="48c03f3409e7ad37f5c6aa55be030d2c6be0265897a82cadba3c32160f623f12825f6073bac6544a199d756ec82262cea3386e00ebcdc22f010b909542b463f49f7989c2f1174c5ad6142d8d8eae438544fd9350aff4e48694863b518c7369e5284cdb31d447bdc9879502335ceb85e171a6769ca6056db42d6e8dcc32b55973829eef89e8188386f90760e6755859266b97a7799be06fcfb1003b3dd2e8fb386df2fef894a26d1cc01cd1604c9f543b7b382c5a0d2944eba0b716f2b6a779bea4d435", &(0x7f0000000300)="8aa96ede97745fb62bf8a1a58ad07cf8b80b12484db13a96be2f49281e202eafeea1aa53b316f7ecc54bf0789d4b726b7e12a48ad6ce7bbaa327972799edc387499e771604d755cbfc9e82b463a883a8156f434646db4eeb22c5b340c9d2d14e5772aa52122ce71756411ac55722d7a4cac4bbf0aab23dbd8a66830162d7e458151caf02c18f62864591268d5c03572d6c16d31d73f891a95241182342a6f9d90ecb85c028a6782f0f87c1890ea25006ad72e1d58ec6fdd45e96ee7db6d6a838c43c786dae45d4b316170a952abfe55144434bd5a1a4f5cfc12b"}}, &(0x7f0000000180)=0x0) recvmsg(r2, &(0x7f0000000a40)={&(0x7f0000000700)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000780)=""/198, 0xc6}, {&(0x7f0000000880)=""/67, 0x43}, {&(0x7f0000000900)=""/96, 0x60}], 0x3, &(0x7f00000009c0)=""/93, 0x5d, 0x7fffffff}, 0x40) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/context\x00', 0x2, 0x0) timer_delete(r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) r4 = open(&(0x7f0000000680)='./file0\x00', 0x80, 0x16) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e24, @broadcast}}, [0x9, 0x81, 0x1, 0x3ff, 0x0, 0x4, 0x2, 0x7, 0xfffffffffffffffe, 0xb8, 0x6ba3, 0x401, 0xa0, 0x40, 0x1]}, &(0x7f0000000540)=0x100) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000580)={r5, @in6={{0xa, 0x4e23, 0xd87d, @loopback, 0x4}}}, 0x84) 14:21:34 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:34 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:34 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0xfffffffffffffffd, 0x0, &(0x7f00000024c0), 0x100020, &(0x7f0000000080)) [ 386.003246] binder: 21555:21563 BC_FREE_BUFFER u0000000000000000 no match [ 386.007558] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue 14:21:34 executing program 3: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() r2 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) accept(r2, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:34 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x42, 0x800) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x6, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x20002, 0x120) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000000c0)) [ 386.054881] binder: 21555:21563 BC_FREE_BUFFER u0000000000000000 no match 14:21:34 executing program 2: syz_read_part_table(0x437ba39b, 0x4, &(0x7f0000000340)=[{&(0x7f0000000080)="98719f15b2abda9254958cf45c227bd464e2244eea91504ce563e9ed104f965fd258debe32ee50b62bcf8021f83ece9f5795e43a16a03618f15d37081ea53c448ce3f01dfcc88697ebb20faf349e534aa52b436537355df836c0e737962dcd898764124faa0ddc513f167b239b122f3a5187f79c64c2472d944345ad230f0873b92cfdf7c5ad06c619fe58418fe3987a63f2e90b6c10008663378cf805ee07b2cac3c1bc4828bc16f4fca6a84669da66138433b5e2f6c4597c7017", 0xbb, 0x6}, {&(0x7f0000000200)="dd00b45a4165b63647d3398541d84cab69188f878aa10c7a75eef292095e4de1409757eaa7786fdc1312c92397523bed58cd1b2390d4a781b108d770c5ab56151a8ee89ba8348e0b57d7ef0860eeb5a9fff3ea61dc34f694cc582d50ae2330812ffbb0cb33c8fdf1a39385b4b71f53", 0x6f, 0x3}, {&(0x7f0000000280)="21edb9235ba9387368c8fc9256227fb78bd0e47c61aeeb3be433341fb0f860ff72245441b8cea1fe3b30362a15aaceb1f25a9556dabf634cf8a54fe499eac4fb5ab85bd9c26f9aacb3c9dd2c2fc2d0fe9d758ffe2b790d34a673fe371f56faa6e8534acdb22a8e95bef51773c3247802e498b6a9741d524e437c9789354632c61bddb853d7a7345d82dd42af579a151807f8a2ac7c052f4f8fcd2cddaa", 0x9d, 0x6528ff25}, {&(0x7f0000000140)="ac4b3e4a14d49e3771ec8c", 0xb, 0x32b8}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0xffffffff80000000, 0xdf1, 0x4, 0xff}) 14:21:34 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:34 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f00000004c0), 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f00000003c0)='fou\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000200)={0x0, &(0x7f0000000040), 0x0, r4}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000580)={0x2, &(0x7f00000005c0), 0x0, r4, 0x4}) eventfd2(0x7ca, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') 14:21:35 executing program 7: rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="000000000000000003260840", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 14:21:35 executing program 5: 14:21:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0xfffffffffffffffc, 0x0) r1 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000080)="6569c2ec6f812fdd134b8534147d39b5e4f3875afdb5e62b12574cfa7e84f727643194b730193d368ec34738d43cd95637", 0x31) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x11}, 0xffffffffffff1d5b}}, [0x3, 0x2, 0x4, 0x8000, 0x3, 0x0, 0x5, 0xffffffff, 0xa52, 0x6, 0x1, 0x9aa, 0x7f, 0x1ff]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000300)={r4, 0x84, "fd36fd4f0378ba3e2a5a154c1d66924051e05c8fa3a2cd4cb542f360a5600aad38bc4c0d03b064f72b70f976d210095922aa0c3a8f9f7f013b662c5b0ef12a3970c2c200b39550c2a6a869429c6420ec4bd240c9b91f5b7ac4e448865711acb27770f19892849d14091acfd3173f9a25a75aafe546aab389697708bd5c8989e423c7fd8f"}, &(0x7f0000000140)=0x8c) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, r3) [ 386.324340] binder_thread_write: 6 callbacks suppressed [ 386.324353] binder: 21609:21610 BC_ACQUIRE_DONE u0000000000000000 no match [ 386.336940] binder: 21609:21610 unknown command 1074275843 14:21:35 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:35 executing program 5: [ 386.423319] binder: 21609:21610 ioctl c0306201 20000100 returned -22 [ 386.451891] binder: 21609:21616 BC_ACQUIRE_DONE u0000000000000000 no match [ 386.459049] binder: 21609:21616 unknown command 1074275843 14:21:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) pipe2$9p(&(0x7f0000000040), 0x80800) 14:21:35 executing program 5: mkdir(&(0x7f0000d90ff8)='./file0\x00', 0x0) mount(&(0x7f0000212ff8), &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000000140)='./file0/bus\x00', 0x0) mq_getsetattr(r0, &(0x7f00000000c0)={0x800}, 0x0) [ 386.515856] binder: 21609:21616 ioctl c0306201 20000100 returned -22 14:21:35 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="0000000000000000036308405964706d112e1e86c3dde238e7f65d017d538fc720c0347ca85498c32b45db471c5575db89bda033de2a92294dd8f54ffe05cbd5b62857ffff9b34c7b72607c0a2d91ab0d33e212001d210d9ded2a551cee83323332d4bebc72ec6a8422559ed9321cddc51c9a6f0e87d3430c81def18260ab9b02328b18b7b9489e45058421b60c64456f969c9188a", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:35 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:35 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:35 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:35 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x8) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:35 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockname$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x20, 0x9}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)={r4, 0x3, 0x9, [0xfff, 0x7, 0xfff, 0x81, 0x5, 0x9, 0xf3705e9, 0x0, 0x81]}, &(0x7f0000000480)=0x1a) socket$kcm(0x2, 0x3, 0x2) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/58) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x0, 0x37b, 0x7, 0x9, 0x3, 0x6, 0xc942, 0x0, 0x40, 0x160, 0x40, 0x1000, 0x38, 0x1, 0x5, 0x81, 0x2}, [{0x1, 0x7, 0x8, 0x2, 0x0, 0x4, 0x0, 0x3}], "f23fb4e36d8a7aaf8b93e2ce26ba2ea1fa382f2bf18c1153da77e6afcfe2bfb8d98f9ebf9b10e4b8127370442c7e4915ffd4d39a1b473b2c9287bce230d4943db1d9de5ba0959a5a9894b8540fa540a063852f2baf569dd4385b044bfa7ec099ca256a48f20897aaed9541d7c4930192971d73"}, 0xeb) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x308) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000005c0)=""/9, 0x9}], 0x1, &(0x7f0000001840)=""/33, 0x21}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xfffffffffffffffd) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.stat\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}}, 0x80, &(0x7f0000000040)}, 0x0) 14:21:35 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x10000, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x2, 0x100, 0xfffffffeffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) 14:21:35 executing program 5: mkdir(&(0x7f0000d90ff8)='./file0\x00', 0x0) mount(&(0x7f0000212ff8), &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000000140)='./file0/bus\x00', 0x0) mq_getsetattr(r0, &(0x7f00000000c0)={0x800}, 0x0) 14:21:35 executing program 7: accept(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000000)=0x80) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x9c, 0x30}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r1, 0x8000, 0x6}, &(0x7f0000000240)=0x8) r2 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:35 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 386.682416] binder: 21637:21643 BC_ACQUIRE_DONE u0000000000000000 no match [ 386.738889] binder: 21637:21643 BC_FREE_BUFFER u861e2e116d706459 no match [ 386.909060] binder: 21662:21671 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:35 executing program 5: unshare(0x400) clock_gettime(0x0, &(0x7f0000000200)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r0, &(0x7f0000000040)=""/182, 0x3e) 14:21:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) [ 386.963358] binder: 21662:21671 BC_FREE_BUFFER u0000000000000000 no match 14:21:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:35 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x4) [ 387.054079] binder: 21662:21685 BC_ACQUIRE_DONE u0000000000000000 no match [ 387.082261] binder: 21662:21685 BC_FREE_BUFFER u0000000000000000 no match 14:21:35 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:36 executing program 5: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) lseek(r0, 0x1, 0x1) 14:21:36 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockname$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x20, 0x9}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)={r4, 0x3, 0x9, [0xfff, 0x7, 0xfff, 0x81, 0x5, 0x9, 0xf3705e9, 0x0, 0x81]}, &(0x7f0000000480)=0x1a) socket$kcm(0x2, 0x3, 0x2) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/58) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x0, 0x37b, 0x7, 0x9, 0x3, 0x6, 0xc942, 0x0, 0x40, 0x160, 0x40, 0x1000, 0x38, 0x1, 0x5, 0x81, 0x2}, [{0x1, 0x7, 0x8, 0x2, 0x0, 0x4, 0x0, 0x3}], "f23fb4e36d8a7aaf8b93e2ce26ba2ea1fa382f2bf18c1153da77e6afcfe2bfb8d98f9ebf9b10e4b8127370442c7e4915ffd4d39a1b473b2c9287bce230d4943db1d9de5ba0959a5a9894b8540fa540a063852f2baf569dd4385b044bfa7ec099ca256a48f20897aaed9541d7c4930192971d73"}, 0xeb) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x308) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000005c0)=""/9, 0x9}], 0x1, &(0x7f0000001840)=""/33, 0x21}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xfffffffffffffffd) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.stat\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}}, 0x80, &(0x7f0000000040)}, 0x0) [ 387.232118] binder: 21700:21705 BC_ACQUIRE_DONE u0000000000000000 no match [ 387.254931] binder: 21700:21705 BC_FREE_BUFFER u0000000000000000 no match 14:21:36 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:36 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockname$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x20, 0x9}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)={r4, 0x3, 0x9, [0xfff, 0x7, 0xfff, 0x81, 0x5, 0x9, 0xf3705e9, 0x0, 0x81]}, &(0x7f0000000480)=0x1a) socket$kcm(0x2, 0x3, 0x2) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/58) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x0, 0x37b, 0x7, 0x9, 0x3, 0x6, 0xc942, 0x0, 0x40, 0x160, 0x40, 0x1000, 0x38, 0x1, 0x5, 0x81, 0x2}, [{0x1, 0x7, 0x8, 0x2, 0x0, 0x4, 0x0, 0x3}], "f23fb4e36d8a7aaf8b93e2ce26ba2ea1fa382f2bf18c1153da77e6afcfe2bfb8d98f9ebf9b10e4b8127370442c7e4915ffd4d39a1b473b2c9287bce230d4943db1d9de5ba0959a5a9894b8540fa540a063852f2baf569dd4385b044bfa7ec099ca256a48f20897aaed9541d7c4930192971d73"}, 0xeb) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x308) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000005c0)=""/9, 0x9}], 0x1, &(0x7f0000001840)=""/33, 0x21}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xfffffffffffffffd) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.stat\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}}, 0x80, &(0x7f0000000040)}, 0x0) 14:21:36 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6900, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) 14:21:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:36 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfffffffffffffff7, 0x101000) 14:21:36 executing program 5: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) lseek(r0, 0x1, 0x1) 14:21:36 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) [ 387.388021] device nr0 entered promiscuous mode [ 387.472829] binder: 21722:21727 BC_ACQUIRE_DONE u0000000000000000 no match [ 387.523089] binder: 21722:21727 BC_FREE_BUFFER u0000000000000000 no match 14:21:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:36 executing program 7: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) 14:21:36 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="007294000000000003630840", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:36 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) 14:21:36 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa8ce689bcc6dd921, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000680), 0x3ad, 0x0, &(0x7f00000004c0)="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"}) 14:21:36 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) [ 387.760721] binder: 21757:21760 BC_ACQUIRE_DONE u0000000000000000 no match [ 387.768279] binder: 21757:21760 BC_FREE_BUFFER u0000000000000000 no match 14:21:36 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0)) [ 387.850492] audit: type=1400 audit(1536243696.681:33): avc: denied { map } for pid=21766 comm="syz-executor7" path="/dev/binder0" dev="devtmpfs" ino=1385 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 14:21:36 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r2 = accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000), 0x10) getsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 387.932364] binder: 21773:21774 BC_ACQUIRE_DONE u0000000000000000 no match [ 387.951702] binder: 21773:21774 BC_ACQUIRE_DONE u0000000000000000 no match [ 387.998740] device nr0 entered promiscuous mode 14:21:36 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='cpuacct.usage_percpu\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000740)={{0xa, 0x4e23, 0xffffffff, @remote, 0x8000}, {0xa, 0x4e24, 0xfff, @local, 0xffff}, 0x6, [0x9, 0x81, 0xaf5, 0x100, 0x8, 0x0, 0x7f80000000, 0x2]}, 0x5c) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={[], 0x2, 0x6, 0x9, 0x0, 0x7f}) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x52e) bind$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x6e) 14:21:36 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000080)) [ 388.159676] QAT: Invalid ioctl [ 388.176930] QAT: Invalid ioctl 14:21:37 executing program 2: 14:21:37 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0x12, &(0x7f0000000040)=""/61) 14:21:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:37 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x20000150) 14:21:37 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) r1 = accept(0xffffffffffffff9c, &(0x7f0000000080)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000000)=0x80) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140)={0x100}, 0x4) 14:21:37 executing program 1: 14:21:37 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:37 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) utimensat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x0, 0x2710}}, 0x100) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r2, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:37 executing program 1: 14:21:37 executing program 2: 14:21:37 executing program 5: 14:21:37 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x30f2c94adc07478b, 0x0) sendmmsg$alg(r1, &(0x7f00000014c0)=[{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000280)="359de33cf833e07d636bc6f543d31b3333c5bdb812d291d0a16c3019c03e7a932a66ed170f20847cf6e92ffafe1065d09e5df9f81c05c3249c5bf91dd7e4b4d40832b332dfaa6cb0812c731c218a3985a916474ded9d55d4b3240d73f1963f3f5107b9601c78f741c075ce900a9e852dd7ffe2a5987a7918a6be2aa9a4dce49df44b3d2ef7661dff6b126a64070a8324bc29d401b09cf16e35aa8f62ce1440fde07582e0897e41802272f0", 0xab}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="0c8f4714b7736831a896f63f59bd53b59217dcc269b3e5e4c68eb30243a9308ef385d6265ada8aca9d490fc9ded0a365821555cdfaf8c9988e78cd44f9232801b2f161eb49f03301f98dcd49073d7f142e81a554cdf77d7a8d9ccc1e09cd197df1c384af85a17da9e3c93e86fff6a9964f031a6898c18d3c23b4879a38023853698a6024ce38192dd12a176f769dff9713468fdb8744e3ffd8add35d217f9ab257ac24d2c2a05a3ac2b71c04b5f586055197fda6c637131c50", 0xb9}], 0x3, &(0x7f0000001440)=[@op={0x18}, @iv={0x50, 0x117, 0x2, 0x3a, "ea9a17a326ed2d3a8f5a17be074d4867dd3a46511c6f0246e3a6053210a62a8dd5cda9a550daf25060fb2275c572b33dfadac1b2700a2e6a6822"}], 0x68, 0x4000}], 0x1, 0x40) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x78, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc00000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004045}, 0x20040000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000040)=[@exit_looper, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:37 executing program 1: 14:21:37 executing program 2: 14:21:37 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00f40400a88f08ed10896f6cfd9e034ada9fc2", @ANYRES64=0x0, @ANYBLOB="000000000000000003630840", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:37 executing program 5: 14:21:37 executing program 1: 14:21:37 executing program 2: [ 388.764663] binder: 21840:21842 unknown command 324608 [ 388.804943] binder: 21840:21842 ioctl c0306201 20000100 returned -22 14:21:37 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x48) 14:21:37 executing program 5: 14:21:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:37 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:37 executing program 2: 14:21:37 executing program 1: 14:21:37 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="000000000000ea00036321c78f4052e1d263f105403859fa850840fb5c87211ae58775686f0300b79a3ac6967e6139e74cfd4b2c9440d1056aaaab2aa731342cce1664b37d5a08b8d1f9e778ed", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) sync_file_range(r0, 0x80000, 0x1, 0x1) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x100, 0x9) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000180)=0x1e) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080)) 14:21:37 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x717, 0x4000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x7d5c}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r1}, &(0x7f0000000340)=0x8) getpid() bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$read(0xb, r2, &(0x7f0000000240)=""/237, 0xed) 14:21:37 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x1) write$P9_RRENAME(r2, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) r3 = accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x2, 0x3, 0x3}}, 0x26) 14:21:37 executing program 5: 14:21:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:37 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socketpair(0x8, 0x2, 0x5, &(0x7f0000000080)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x440001) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000040)={r2}, 0x3) 14:21:37 executing program 5: 14:21:37 executing program 1: 14:21:37 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=0x4) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f00000000c0), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cgroup.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000005c0)={0x6, 0x5, 0xadf, 0x8}, &(0x7f0000000600)=0x10) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000180)=0x0) ptrace$getsig(0x4202, r3, 0x0, &(0x7f0000000480)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000340)=0x800000001ff, 0x10000038f) clock_gettime(0x0, &(0x7f0000000240)) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0xffffffffffbffffc) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=@random={'system.', 'cgroup.stat\x00'}, &(0x7f0000000380)=""/242, 0xf2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000040), 0xfe30, 0x20000006, &(0x7f0000000080)={0xa, 0x4e22, 0x5000000000000, @empty={[0xe00000000000000, 0xfe80000000000600, 0x0, 0xe603000000000000]}}, 0x1c) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) getuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 389.096004] binder: 21869:21872 unknown command -954113277 [ 389.130555] binder: 21869:21872 ioctl c0306201 20000100 returned -22 14:21:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 389.185940] binder: 21869:21885 unknown command -954113277 [ 389.214002] binder: 21869:21885 ioctl c0306201 20000100 returned -22 14:21:38 executing program 1: 14:21:38 executing program 5: 14:21:38 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) r1 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@xdp, &(0x7f0000000380)=0x80, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@remote}}, &(0x7f0000000000)=0x24) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x0, 0x0) connect$rds(r3, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f00000002c0)=0x5, 0x4) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x3ac) fchown(r0, r2, r5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:38 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x48) 14:21:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:38 executing program 1: 14:21:38 executing program 5: 14:21:38 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x18c, 0x0, &(0x7f00000002c0)}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000080)="4c18f246424cb88d12ca0ef4cacfadf8916a3e4ea8169341d7aad9317921d0c38a8549202be672f01fede266174cd155fea4e89470ca191d492fb9577a517583a717fb49a00140fa81240fcfd3004c64f5bcc96ce308d9bf930555b9f67a8ebfbd32a5edf23013589605cd", 0x6b, 0x9, &(0x7f0000000140)) 14:21:38 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = getpgrp(0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000040)={0x1, 0x4, 0x3, 0x4, r1}) r2 = getpid() r3 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000200)) r4 = accept(r3, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x100}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e23, 0x1, @ipv4={[], [], @rand_addr=0xa1}, 0x8ea}}}, 0x84) 14:21:38 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = dup(0xffffffffffffff9c) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000240)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:21:38 executing program 1: 14:21:38 executing program 5: 14:21:38 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x10000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x200500, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x3f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)}) 14:21:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 389.779029] binder: 21935:21940 ioctl 1 20000040 returned -22 14:21:38 executing program 2: 14:21:38 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x20000150) 14:21:38 executing program 5: 14:21:38 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300d4fc", @ANYRES64=0x0, @ANYBLOB="b371e5d0ca482205f85c056c579ba1d6e71f8c6cdf8b331f074b31f4ca030f6c5fc1feeba50475f4db860d23e653b9dcc1aef1745ec75a215e0f7ef541c3a3842c64926da5c13ee4f67bd97b5c7e309918a0755192402401a3e78987d7a97caa09777acde75653a5bca3927736e41b48b44f21b5d2af56fafd01c5de6009ccb9c0a9349f9ddad0e3e35f5c2b9176771014aa0dcea1336e9e613c5d270df6b82c1f54f5a6ef96a710f98b233c520ef51d9763a74383ecdc899b9a8b19a9d943aca2f0147749ac67359a14bca1d661f22767319039760a25babc9c01500044e7a1010f46a8d64b7b5a05323b34c0e7af93934b14d2a963c0a82f3cf1095cd7c2dc4715ca68a1e41ec7beb8776203ff7ed65b293f1385954d5ad8440aeea5417829572dd5db16c4904ee70638ade342f596907221abffb9f371948bda9bebd5a6b5b374bdb069512408480b48acb687da37f7cd73c23f3b28efab6a7c61a91fa382ad2a3d7e1ecfad641a9448a517", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) 14:21:38 executing program 1: 14:21:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:38 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) r1 = getpid() bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x80000000000201, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) read(r3, &(0x7f0000000100)=""/19, 0x1000001f7) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x402800, 0x0) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:38 executing program 2: 14:21:38 executing program 1: 14:21:38 executing program 5: [ 389.973955] binder: 21960:21967 unknown command -53215229 [ 390.003250] binder: 21960:21967 ioctl c0306201 20000100 returned -22 [ 390.076118] binder: 21960:21967 unknown command -53215229 [ 390.106897] binder: 21960:21967 ioctl c0306201 20000100 returned -22 14:21:38 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) getpid() accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:39 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:21:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:39 executing program 1: 14:21:39 executing program 2: 14:21:39 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x10001, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0xa, &(0x7f00000000c0)=0x8, 0x4) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 14:21:39 executing program 5: 14:21:39 executing program 1: 14:21:39 executing program 5: 14:21:39 executing program 2: 14:21:39 executing program 1: 14:21:39 executing program 2: 14:21:39 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x80, 0xc43871dc6632b7b) r3 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x80000) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000180)={r3, 0x7f, 0x7, "427600e4f88e64eb2bba5b25da7d0851c55bfafb8fb1f62faa49953b44ff800db01e0cc6179b7ffba3f2217f6411ce67ca8b5048f8d1"}) 14:21:39 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0910de", @ANYRES64=0x0, @ANYBLOB="000000000000000003630840", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:39 executing program 5: 14:21:39 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x1) r1 = getpid() r2 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) accept(r2, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:39 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x24) 14:21:39 executing program 2: 14:21:39 executing program 1: 14:21:39 executing program 2: 14:21:39 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000080)=[@acquire_done, @free_buffer]}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x280000, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000002c0)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x40, "7de8187426172d4d505309bbe210e21bd3ca77eeaf32509d60c40d1dfbeb1fc912bfdfb3771a0805264a0d3662c1bb77428640e793c4fb9b0d18d34b1ab50c77"}, &(0x7f0000000040)=0x48) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r3, &(0x7f0000000200)=0x4) pipe2(&(0x7f0000000240), 0x80800) [ 391.024614] binder: 22030:22038 unknown command 14553097 [ 391.039346] binder: 22030:22038 ioctl c0306201 20000100 returned -22 14:21:39 executing program 1: 14:21:39 executing program 5: 14:21:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:40 executing program 2: 14:21:40 executing program 5: 14:21:40 executing program 1: [ 391.211714] binder_thread_write: 12 callbacks suppressed [ 391.211725] binder: 22053:22059 BC_FREE_BUFFER u0000000000000000 no match [ 391.307019] binder: 22053:22059 BC_FREE_BUFFER u0000000000000000 no match 14:21:40 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0x0) r2 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000005, 0x20050, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0xec, 0x0, &(0x7f00000002c0)=[@exit_looper, @free_buffer={0x40086303, r1}, @reply_sg={0x40486312, {{0x2, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x28, 0x18, &(0x7f0000000080)=[@ptr={0x70742a85, 0x1, &(0x7f0000000000), 0x1, 0x0, 0x1b}], &(0x7f00000000c0)=[0x48, 0x40, 0x20]}, 0xffffffffffff2757}}, @acquire_done={0x40106309, r2}, @request_death={0x400c630e, 0x2, 0x3}, @increfs={0x40046304, 0x3}, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x20, &(0x7f0000000200)=[@ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1, 0x1, 0xd}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x4, 0x39}, @fda={0x66646185, 0x0, 0x2, 0x1b}], &(0x7f0000000280)=[0x0, 0x38, 0x28, 0x48]}, 0x9}}, @decrefs, @request_death={0x400c630e, 0x3, 0x2}], 0x9a, 0x0, &(0x7f00000003c0)="b8a0255b6d170073deaed7f4c80f6866a404c891327d657e8ab7ee6337a32e06d122880c4b7a6d2bee621ac9b330ed437c6f342dfd979bcf351563c0463c5825ec3146fd8bd24e7370c0500e5667998eb69876f76bc5b1e74b0ea2e6e1edbcd672ac22caa2d26ba4219cec13ce55d6074bb2e67b9e855972257534e5624598556ca223793d29fac3b48aefda77cb6ac3e646d68d336faf951cff"}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000004c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:40 executing program 6: r0 = gettid() sched_getaffinity(r0, 0x8, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r1}, 0x10) 14:21:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:40 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000040)={{0x8, 0x2}, 0x1, 0x3, 0x80000001, {0x7, 0x978}, 0x7baf, 0x57}) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000180)=0x8) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:21:40 executing program 2: 14:21:40 executing program 1: 14:21:40 executing program 5: 14:21:40 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xecb, 0x48000) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x8a, "925a40e4877a8a56668dac0039d2b9affc6ff4801b994c90bcbb6eb0ddadf8c91a67213ae18a131bbce04bc66ffd332dd8994650030915fe64f865498dd797116274752f7e77e5f14d61aca6e8a60d00044c63b80e8ca2e4e793746ba08eb073273ab7f86869bb65632252f367151acbf8c63aed673eaff9494a883246a6d4c09af76443ee5baa58232b"}, &(0x7f0000000040)=0x92) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000240), 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000280)={0x100, 0x2, 0x0, 0x6, r3}, 0x32a) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) socket$pptp(0x18, 0x1, 0x2) prctl$setname(0xf, &(0x7f00000001c0)='/dev/admmidi#\x00') 14:21:40 executing program 1: [ 391.498710] binder: 22079:22087 BC_FREE_BUFFER u0000000000000000 no match [ 391.506278] binder: 22079:22087 got reply transaction with no transaction stack [ 391.513812] binder: 22079:22087 transaction failed 29201/-71, size 40-24 line 2762 [ 391.534098] binder: 22079:22087 ioctl 40087602 200004c0 returned -22 14:21:40 executing program 5: 14:21:40 executing program 2: [ 391.548311] binder_thread_write: 13 callbacks suppressed [ 391.548323] binder: 22079:22087 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:40 executing program 2: [ 391.603158] binder: 22079:22087 BC_FREE_BUFFER u0000000000000000 no match [ 391.639752] binder: 22079:22087 BC_FREE_BUFFER u0000000000000000 no match 14:21:40 executing program 1: 14:21:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 391.646915] binder: 22079:22087 got reply transaction with no transaction stack [ 391.654486] binder: 22079:22087 transaction failed 29201/-71, size 40-24 line 2762 [ 391.663249] binder: 22079:22100 ioctl 40087602 200004c0 returned -22 14:21:40 executing program 5: 14:21:40 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000040)=[@acquire_done, @register_looper], 0x0, 0x0, &(0x7f00000002c0)}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xcc, 0x4000) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0x100000000, 0x3, 0xfffffffffffffffd, 0x5, 0xf95, 0x7f, 0x1, 0x7, 0xdb, 0x9, 0x1, 0x8000, 0x1}, {0x3, 0xffffffff, 0x2, 0x3, 0xc91, 0x3, 0x80000001, 0x7fffffff, 0x2, 0x2, 0x0, 0x8001, 0x6bfd}, {0x0, 0x5, 0x20, 0xfffffffffffffff8, 0x1, 0xa8, 0x7, 0x7, 0x6, 0x1be7, 0x7fffffff, 0x2, 0x1f}], 0x2}) ioctl$void(r0, 0x5451) 14:21:40 executing program 2: [ 391.838555] binder: 22109:22111 BC_ACQUIRE_DONE u0000000000000000 no match [ 391.845740] binder: 22109:22111 ERROR: BC_REGISTER_LOOPER called without request [ 391.876795] binder: 22109:22111 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:40 executing program 6: openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x80, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = socket(0x4, 0x3, 0x80) r3 = dup3(r0, r0, 0x80000) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000180)) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000000c0)="e2d7abe01233277bbc4b514f3a15de36906fcc08aa02b99ca10107838a6832dd9fa5decc00000000000000000000000000", 0x3aa) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xb17, 0x4, 0x3, 0x0, 0x0, 0x4, 0x0, 0x8, 0x4, 0x52, 0x3, 0x5, 0x80, 0x8000, 0x8001, 0x9, 0x0, 0x8, 0x7, 0x1, 0x8001, 0x7fffffff, 0x4, 0x81, 0xdd6, 0x8001, 0xfffffffffffffffc, 0x579, 0x1, 0x5bfd, 0xffff, 0x5, 0x100, 0x3, 0xaab, 0x4, 0x0, 0x15bda839, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x1080, 0x6f1a954c, 0x0, 0x2, 0x401, 0x10001, 0x6}, r1, 0x5, 0xffffffffffffffff, 0x2) 14:21:40 executing program 1: 14:21:40 executing program 5: 14:21:40 executing program 2: [ 391.883948] binder: 22109:22111 ERROR: BC_REGISTER_LOOPER called without request 14:21:40 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:21:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:40 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20082, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r1}) r2 = getpid() r3 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x10000) accept(r3, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:40 executing program 7: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:40 executing program 1: 14:21:40 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="7d02b5b4532a6dc315", 0x9}, {&(0x7f0000000040)="055c0f4f54e88d51586d73b430a70eaa1e39b38ab540567a4044e32e1c6d72d4c51b746934f50cc454a106fb9efa0c11c5af8ffa0ecadcd2b70377ba0e5e9763d3d4adc9e98fff7150b9eecb91e6f916ded21279fe4811834e89c298b85afec3e28d0c4b113f95ca1a23cb16f90798c1205cdff4954ae107b2456209b158112e5fd2fe7c526d88ec6a61d24ed234b28b8c8ab3", 0x93}, {&(0x7f0000000240)="5dd6070158dc56a3668fd488e982e9e5c9bb47f13cbcc3af9dd6a9130f7e6f5af61803d4166de959b26bf46c0b80d1640f599b3b4e6d9bc881ab954fd8facc9ff047ff1ab6ea713fbd3233bb6899d2f02c2b29baa188ce7e0c1a8a3ac715d9e5e72f2b0331a458a24ecc57d33a785c1348bbb09661740ed13688b4087fa21ffea882a99d9a155743d4aa", 0x8a}], 0x3, 0x0) 14:21:40 executing program 2: 14:21:40 executing program 5: 14:21:40 executing program 4: clone(0x800000, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:21:41 executing program 2: 14:21:41 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x2080, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x6, 0x8, 0x4, 0x6, 0x4}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000180)={r3}, 0x8) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000040)=0x6) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:41 executing program 1: [ 392.142609] binder: 22150:22156 BC_ACQUIRE_DONE u0000000000000000 no match [ 392.172591] binder: 22150:22156 BC_FREE_BUFFER u0000000000000000 no match 14:21:41 executing program 5: 14:21:41 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0xd72d94dd96c76f15) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000080)) 14:21:41 executing program 2: 14:21:41 executing program 1: 14:21:41 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7ff, 0x1a001) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() r3 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f00000001c0)='cifs.idmap\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="c0a06d42a634f131461b61a1c2443df6e79f120fabd681b6cc2260ec2bdc5e343a3ff30104cdcbd00886fd40674cea30ff0dc89fddfb92fcecb8f1b002e683b29a93a078e0b5c63fa92b50d226616a658a696f8bcec8ef4f35b65a6b", 0x5c, 0xfffffffffffffff9) keyctl$instantiate(0xc, r3, &(0x7f0000000240)="537d9175163f0cf2faf62162813326ebb3adb17348bc7ce838475ff65b12454f45dfc5e2c2c7b6e149839eef7b38f77751db9498877b61bd529613cfe9a377163c8a6147332791d265dd232733ba71899b322fe830aa52f263", 0x59, r4) sched_setscheduler(r2, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:41 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='$vboxnet1\x00'}, 0x10) bind$bt_sco(r1, &(0x7f0000000180)={0x1f, {0x8aa1, 0x4, 0x8, 0xff, 0x800, 0x5}}, 0x8) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r2, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000040)={0x5, 0xffffffff, 0x1}) setsockopt$llc_int(r3, 0x10c, 0xa, &(0x7f00000000c0), 0x4) 14:21:41 executing program 5: [ 392.422257] binder: 22180:22191 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:41 executing program 1: 14:21:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:41 executing program 5: 14:21:41 executing program 2: [ 392.480350] binder: 22180:22191 BC_FREE_BUFFER u0000000000000000 no match 14:21:41 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/relabel\x00', 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x400000, 0x4) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) ppoll(&(0x7f00000001c0)=[{r0, 0x8180}, {r1, 0x200}, {r2, 0x100}, {r3}], 0x4, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={0x8001}, 0x8) r4 = gettid() ioprio_get$pid(0x2, r4) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) ptrace$cont(0x20, r4, 0x1, 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x1) setns(r6, 0x8000000) 14:21:41 executing program 1: 14:21:41 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000346fc8), &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0xb4, 0xffffffbc) listen(r2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x178a, 0x8a00) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) accept(r1, &(0x7f0000000500)=@llc, &(0x7f0000000580)=0x80) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f00000003c0)=0x9498, 0x2) sendmsg$xdp(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x2c, 0x7, r5, 0x27}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000180)="947b1fcff811956c15a88ab04f70f96aa40462c106827c", 0x17}, {&(0x7f0000000200)="85e9bc5116af6254fa4878a9c8253112b247fc7a60577aa11959b2b045dc0fd04259ebf33973be27266c71fe66c15f7e4731a9f1361b52218f8598f979f6d1452a75d95f20fe5f", 0x47}, {&(0x7f0000000280)="3b06cae30e19bf6eaaa2424b7fa8480bed45006aae1fbb718114594621671e2bc02e7ae2b143c6bae88e557e42a1258151f6f96a21204ffb873ec647a6e55e7ff8674fa04601aaad62908d7b74a0ec80af607d88fe212bd58285176c9b42c1eb95d1ded13edbf9dd151c0b8acddbf7faa127f0a5e35cf087b73ab43deff6279c87e2cb8c75d41d1198d86cfcc18fe0af4cdc2e2552bb8e88274691546e6d7270bf112656df29247ff73ca2c7df42272876283781a47f04f3c2f3681c35", 0xbd}], 0x3, 0x0, 0x0, 0x20000800}, 0x40050) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000400)={0x2, [0x0, 0x0]}, &(0x7f0000000440)=0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000480)={r6, 0x80, 0x8, 0x6, 0x53b6, 0x3f}, &(0x7f00000004c0)=0x14) 14:21:41 executing program 5: 14:21:41 executing program 2: 14:21:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:41 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0xfffffffffffffff7, &(0x7f0000000240)=""/240) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f00000018c0)=0x7fffffff) sendmsg$kcm(r3, &(0x7f0000001880)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x4, @local, 'bond_slave_0\x00'}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)="909ddb6ca67c9e37acade28913d10e6e5f55578df87a8db9a9506e54cd4298c7416ec138e4fc52bd9ad340592b8ab6f64c887f7ba9483040a6267e81923f90650f1118fa26c59ffe2219a132ea746072293567c9848cad674828f0c9", 0x5c}, {&(0x7f0000000340)="42cde2aa46ee0f8bae6bed32540118d75a3cf2dacb929f530395ee96544ed1c8a9037a9d6d81dd820fa9790453bab0e71dbc28d8cbc015bd0dc54aadde3df5fd3f7d7c2295f6fe67135aa24a636d", 0x4e}, {&(0x7f00000003c0)="1b6405883a51018e16c61953d1f7b93e85360f7c16c70a051f289929069e43ea5dd5d68b70cd7cfbd6f20b0aaac96c7dee100df0363b512f726ad73f7de0e5dc6c67619f5d3f425cc284b385592eae13d597b07d6ee72e753a50e7a4975b8f0c4a7093679ba8e6f9349ee29dafe24770e9232366f36437b57531ce47ea0b44691c2e481908c5ae1f2418b9e1904fb313e2ab74b7e85b8da36a85ccac3e3a4579ff253d54547a4330743958ae25e46a81d4ab698db5383a5fdb90e46cb1", 0xbd}, {&(0x7f0000000480)="3928f4ef9534ee50902db5e9354a9b754ab82bd242e47ae89b1d69f711a067db79ec1e1483be67e356dca09625208e0b45f0e34a545c47ecf6f5f4ffd0a1ce4b9fe2637edb4260a4ec9d750468ca9c902a5d0b397a6b981defb8885d90c7de585094e1e5fecc942c660c5475873bd982dd5fdaa45740d502f9175958f4dac879468eed088232270a21236dbec22f7b797de54817669ce86dac94aa14efbeb918826166786cbe1ce5d0a525532c19", 0xae}], 0x4, &(0x7f0000000580)=[{0x1010, 0x101, 0x6, "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"}, {0xd8, 0x18b, 0x80000001, "283ecbbb0304bb080ee64fc24eb7138eff52f409ac0869329196c78f7a92e23383d0ed4a2695293745507f7071ba801c9e45ded77842ac902e55893fed8ff4f100bc0c52dcb5bd7942cc6ba4e632d6eb53ba5854c8347e274ddc3b2760a72caaebb71665fe068f33aa4a005e37d0936580a435d9d03f8df15e081799ee03eb563ccdf386a0191aba5894a4e3a38bfe29a26367ae6de8f6b31e39d05e3fb7165b2f3bc69fd25fc26d2593dc135c03d5387b4570fdeab41906e58a79c801af700ce6"}, {0x18, 0x18f, 0x80000001, "90713cd9"}, {0x90, 0xff, 0x101, "bd57cb7738c523cb1890310ad21971d40947a6029ed784caf7887df2d1bee37a504c560143a155b106998d619e6ee3ebef66a7e947db9df2ad1987f2674b85696212f0b7e76341ff555d2f14ed3ab736fdc6d3d726661795baee109bd2051723293a117226ffd7070b5fbd74bb6c38159d7e75c2861a92f9727022bbf0"}, {0x58, 0x0, 0x1, "e62fb2d29016e4d9dc28bf52f0deaef357f6643593e7e58a504ff29b5c88e582ad0b919bad2259da40e23c8dbbc84874097970ca6068971b143d3f5ce5707b6744ac405469"}, {0xe8, 0x103, 0xfffffffffffffc8b, "0aca9d035c6d8b71ecb578edc320b88ca89b64a8a8e6ac4065d2b0a5a8df70af6763627e97231cb5766f087fa0f402a9526eff86af3618371230b1e9591d5e9318858102227388b2b0cb5596d83199d67a33389da4592bf752c7963f35d2267efe3a810ef786af27c646898a509653c8fa0fd80762d6380f15a0c0a9871460f3ebd4764253ba1e45098e01731a7eccddf5cab1a56a34fc7d6b5e8d3d238ce41c2877697c143f909d075fa6b48d411e96b57a7f090bb2b2b6aba8c1c58b42f1ef98e46426dd73546f0af3d6c1ccf819ed209b7a"}, {0x10, 0x1, 0xcdc8b0f}], 0x12e0}, 0x4000045) 14:21:41 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)=0x4035ce, 0x4) 14:21:41 executing program 5: 14:21:41 executing program 1: 14:21:41 executing program 2: [ 392.868308] binder: 22221:22235 BC_ACQUIRE_DONE u0000000000000000 no match [ 392.883791] audit: type=1400 audit(1536243701.714:34): avc: denied { prog_run } for pid=22221 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 392.897718] binder: 22221:22235 BC_FREE_BUFFER u0000000000000000 no match 14:21:41 executing program 1: 14:21:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:41 executing program 5: 14:21:41 executing program 2: [ 393.028306] binder: 22221:22235 BC_ACQUIRE_DONE u0000000000000000 no match [ 393.068133] binder: 22221:22235 BC_FREE_BUFFER u0000000000000000 no match 14:21:41 executing program 1: 14:21:42 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x1) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0xe34}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r3}, 0x8) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:21:42 executing program 5: 14:21:42 executing program 2: 14:21:42 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB="000000000000000003630840", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400800, 0x0) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) getsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f00000002c0)=""/160, &(0x7f0000000080)=0xa0) 14:21:42 executing program 1: 14:21:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:42 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x9, 0x4, 0x4, 0x6, 0x0, 0x1}, 0xfffffe77) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x1000) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000140)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000080)={{0x2, 0x4e22, @multicast2}, {0x7, @local}, 0x8, {0x2, 0x4e20, @loopback}, 'veth0\x00'}) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000300)={{0x2, 0x4e20}, {0x306, @local}, 0x1a, {0x2, 0x4e24, @multicast1}, 'bpq0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x1ff, 0x20, 0x1, 0x1, r0, 0x7f}, 0x2c) 14:21:42 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair(0x0, 0x0, 0x40, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7fffffff}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100)=r2, 0x4) r3 = getpid() r4 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r0, &(0x7f00000002c0)="bd134973bf1699dd325cf342be521a9e59959107b610c764ac00de5e70164f82faf901a493107e201b4ab6c4e42aab6ebd404a8f421dfa007686af309eb2bee135a642d32504a57cee228e9e33f5a3a03d3acac2521672a4f7e6c91694181abf13fd4a007cec95f7a7b94fb22388858fe2eafdcf23cb19224d02f2e1fcbb54e487470dbaf9950afc41a3ce3fb345fc2213087b7c29824237ef81409be378657c27a14b6cc6c582936ec71b27e4ae0c8d30f19a96f3450ab2", &(0x7f0000000440)="4dfc45e4427c4571da2fe4ab", 0x3}, 0x20) sched_setscheduler(r3, 0x5, &(0x7f0000000200)) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x30003, 0x20) accept(r4, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) mount$9p_virtio(&(0x7f0000000140)='\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x80a, &(0x7f0000000240)={'trans=virtio,', {[{@version_9p2000='version=9p2000'}, {@posixacl='posixacl'}, {@afid={'afid', 0x3d, 0x1}}, {@mmap='mmap'}]}}) [ 393.305528] binder: 22269:22275 unknown command 0 14:21:42 executing program 5: 14:21:42 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000e2000000200006ae0000001000000000100000008001200020002000000050000000000300000000203000000000000003fff0002000007000000000000000000000001020014bb00200000ffffffde000000000300050000000000020000f3df0000210008000002000000"], 0x80}}, 0x0) 14:21:42 executing program 2: exit(0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000000), 0x4) [ 393.339858] binder: 22269:22275 ioctl c0306201 20000100 returned -22 [ 393.397817] binder: 22269:22275 unknown command 0 14:21:42 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() open$dir(&(0x7f0000000040)='./file0\x00', 0xc4be9fe12c394ed9, 0x40) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x240200, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)={0x1, 0x40, 0x9449, 0x0, 0x5, 0x6, 0x100000001, 0x5e, 0x9, 0x1, 0xffff, 0x3, 0x0, 0x7ff, 0x2e8, 0x8001, 0x9, 0x100, 0x800}) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000140)=0xffffffffffffff9c) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000000)={r0}, 0x10) [ 393.428371] binder: 22269:22275 ioctl c0306201 20000100 returned -22 14:21:42 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0963779e82fb581aa9afa10893c0c61fb31040", @ANYRES64=0x0, @ANYBLOB="000000000000000003630840", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000000000000050000008c0100000400000000000000000065750ede825eb0af0f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189b0003b2cbdae000000000000710e13"], 0x85) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)) 14:21:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000001200)=""/4096, 0xfffffe19}], 0x1) [ 393.623724] binder: 22317:22322 unknown command -1636343031 [ 393.643184] binder: 22317:22322 ioctl c0306201 20000100 returned -22 [ 393.652706] audit: type=1400 audit(1536243702.483:35): avc: denied { map } for pid=22320 comm="syz-executor1" path="/dev/loop0" dev="devtmpfs" ino=23879 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1 14:21:42 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="ede0e36e79e4c8e4975a462f3279400ea03126f89cbfb178d5c1404bbd8bae998794687d8dcfceef547a4846fb52b113d604cb8692742e5bc72e2e36fea6ea8f78270bc6f51cd1eee081e74754386bacf869c01851a624c7366a4691c62e774df93054d8361dcb13306cf8db299c855c0c712e5ff0cf0ba07e005433bb25661fd6479cf4f103", 0x86, 0xfffffffffffffff8) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000440)="f73eb6d9a8c9ca4a9cc2c0bfd73029bf990f36ba564f7afabf2fa0d4afb49968463ac66704ba50395135d541aebd074a39e3f7d17483945a4494f213417c51e5e96fb88eee0dc6105638eac53d57c2d7933ba0e2a794d93e858fa5f7b65d08d6d71da62c97b69a6a4f2267779d13a2ec94f0ab3d8c5feb88327ba9b710f563fcb837cd4479f1a56cb7f325fe310696d1ff7110fcf062eccf307851f1a3c9a9783316120a3d668858cfced3ed8eef99fed5dbf8366f27146aa14fa5b75bf768be1063b65f1ddcc2c72e7daf2fd19ec38207dfc74814313935849806f935c4d26c7a816d02dcea3e5f22cd1cb93d", 0xed, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000180)=[{&(0x7f0000000300)="f7e97a374dc0ee5ad6a8072940147b7983530f484427d7346aee0066de029e6b5e183b8319db5ef6b44213469820ebd03cc353f4e9b6f8133e82fc65f86e56e8024ee35bddfddaf51d4b5db1d5d7b3f318af8ea88d13747a630e7d82156c6f51feb0313c5de0e430cf033598c3965ee2b848a637c0cec9be69c6f03e0e15e3e253442c5ddab714328ae4ad5c8eab7fb5bb92a6f74251f1b46ffcf74ae6b8604557fc550836a2bd44829b7544937234abf5b18b0f544adc9ad9d61776efbe8c11c1fe3d0e5d1999ac4fa2ccf8d0ee4f30c6d794b89f79cd08692d", 0xda}, {&(0x7f0000000080)="71b5d120db42fe04fd3a7451b8d9884723992349e40edb775c93c8398811bccccfa4b4b7013861de41f11ddc3ab2a75b9b1cc8781d32f2e231fe5a8bdbb452f6b5e2b9ea87ebb051a50d6b0e2b0692187f3eb9423f7cb6d91e3c31d66f7b28b8dee25a", 0x63}], 0x2, r2) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000580)="b11b8da43e94b14300000000aa5fc33ee606d53e9eb4ff4748d932c51cf6d4532c93cbf5f0d14ee25acec70d38d78843fa8d0552c479b6de58c6a0913c1f5bc5da8bec438df82af121ee5313dfe3"}, 0x10) 14:21:42 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000180)={0x20001, 0x0, [0x100, 0x4, 0x1000, 0x2, 0x9, 0x6, 0x0, 0x101]}) r1 = getpid() r2 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r4 = request_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000140)="26736563757269747986", 0xfffffffffffffffd) keyctl$get_persistent(0x16, r3, r4) accept(r2, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:42 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x2000000003) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0aaa2d0252926285717070") clone(0x0, &(0x7f0000000000)="37ed9329dd02be7f0f8aeb94e9", &(0x7f0000000040), &(0x7f0000000100), &(0x7f00000001c0)) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xc0109207, 0x20000000) 14:21:42 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000480)='/dev/amidi#\x00', 0x1, 0x48000) r1 = syz_open_dev$sndpcmp(&(0x7f00000004c0)='/dev/snd/pcmC#D#p\x00', 0x2, 0x10000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x100, 0x5, 0x1, r1}) r3 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x80000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09631840", @ANYRES64=0x0, @ANYBLOB="000000000000000003630840", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) r4 = memfd_create(&(0x7f0000000000)='vmnet0#vmnet0\x00', 0x2) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000140)={0x0, 0xfffffffffffffffb}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000440)=r5, 0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000003c0)={r5, 0x76c}, &(0x7f0000000400)=0x8) r6 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0x1c010, r3, 0x0) r7 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9, 0x13, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x94, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x2}, @decrefs={0x40046307, 0x1}, @increfs_done={0x40106308, r6, 0x4}, @free_buffer={0x40086303, r7}, @clear_death={0x400c630f, 0x3, 0x3}, @reply={0x40406301, {0x4, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000000), &(0x7f0000000080)=[0x18, 0x38, 0x40, 0x30, 0x70]}}, @decrefs={0x40046307, 0x3}], 0xf1, 0x0, &(0x7f00000002c0)="f5e3afb47f355347e4bf89358330c59b091e37a570ffdd522a65a0119e567bbce0f73c64f0f78b983829836b0c989e18e937c09444506ca7b0ec0e791de1ea20165dcf504310e6041af69b449a59101e9092e1f1f4362680c29134e81a9fd43e6ee1122dfba2fa1126da1b54ed4018d64d8a9b4c80b1630efda877f87caa174dfef4eaa30288c39e0b6d22c44f650430e478ff8208191463de49eb726556913c1ef9d8bb8650ddc37c05fcc6873988e1f4933ca4c90f32e26abee0699ebb8b27147f5fd6e66ca86c5d8d6456bc0a76f4a3b66f43d38d3fbc846a1a0206a2fdd358de53dba543cdb1a4e63ed2d3b1df90a8"}) 14:21:42 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000308, 0x0) 14:21:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:42 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) [ 393.824933] binder: 22333:22342 unknown command 1075340041 [ 393.845033] binder: 22333:22342 ioctl c0306201 20000100 returned -22 14:21:42 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000308, 0x0) [ 393.875988] binder: 22333:22342 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 393.883257] binder: 22333:22342 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 393.891046] binder: 22333:22342 BC_INCREFS_DONE u0000000000000000 no match 14:21:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:42 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() ptrace$setopts(0x4206, r0, 0x0, 0x40) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x40, 0x88041) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) [ 393.958716] binder: 22333:22342 BC_FREE_BUFFER u0000000020ffa000 no match [ 393.965846] binder: 22333:22342 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 393.972913] binder: 22333:22342 got reply transaction with no transaction stack [ 393.980430] binder: 22333:22342 transaction failed 29201/-71, size 0-40 line 2762 [ 394.021834] binder: 22333:22342 unknown command 1075340041 [ 394.033257] binder: 22333:22363 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 394.035249] binder: 22333:22342 ioctl c0306201 20000100 returned -22 [ 394.040592] binder: 22333:22363 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 394.054864] binder: 22333:22363 BC_INCREFS_DONE u0000000000000000 no match [ 394.106383] binder: 22333:22363 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 394.113497] binder: 22333:22363 got reply transaction with no transaction stack [ 394.121033] binder: 22333:22363 transaction failed 29201/-71, size 0-40 line 2762 14:21:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:43 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000308, 0x0) 14:21:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:43 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:43 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400200, 0x110) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) 14:21:43 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7f, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000040)={0x16, 0x7, 0x2, {{0x9, "8f6c6f766d6e657431"}, 0x5}}, 0x16) [ 394.353904] binder: 22383:22389 ioctl 541c 20000000 returned -22 [ 394.367601] binder: 22383:22389 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:43 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000308, 0x0) 14:21:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 394.424779] binder: 22383:22393 ioctl 541c 20000000 returned -22 14:21:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:43 executing program 7: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x3) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000040)=[@acquire_done, @exit_looper], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:43 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x1000000000000308, 0x0) 14:21:43 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x5, &(0x7f0000000040)=0x20000000000000, 0x4) 14:21:43 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) socket$kcm(0x29, 0x0, 0x0) r2 = add_key(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000580)="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", 0x1000, 0xfffffffffffffffb) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000480)=[{&(0x7f0000000240)="be89c02e1cc30a4d0c80dbb3e03751e57af3c1839f8dd6a181e5fbe583d21ea4ed855bec7db9f1abc4ff81b6c5f5017d55b0fe493eae62b1af438980c3ca4b4e2cd79e97c7b0e15bfa7344b8968ce974907a7ab413f3da8cb26e5edaa5310342d79ac05fa55dca68ec0fd0fc3fca5f5af34460e0da61575f8e147ecc32b439d95c03a42609e14ebc729f78505fb972c038162f2f37fddc8dc127c7ac0e761ff9a6acb87e5ee3c0e9037e72d97cbd979c86f902968a235006475a9bddd0352c9d72b88c28a4e653a3a1904a30d387067a690689947ea81afe388b6f0029397e4e40ed3364451061", 0xe7}, {&(0x7f0000000080)="6aad60c2fa0ab1a40aefa259a79a43474ed72949f0d978d1ce0ef3bf6ca67a11830712cd83b4929d01454bfb0c65129ba8686371d69d84", 0x37}, {&(0x7f00000000c0)="f65d103bef3032c5a7e3a3fe1e2b7011a256c0dda4ef7f85660de491a8897cae86ab95b741cb58", 0x27}, {&(0x7f0000000180)="73741b6e1eea5fc00143f1a5c57a96618911581f4f57e64a41c30a2c94a3bb2692a581", 0x23}, {&(0x7f00000001c0)="d43ce23a4c9b751e4a2fdef1c18708", 0xf}, {&(0x7f0000000340)="5ee833632f8753f49d1e885be5f0e187686e9220422f780751d44dcc8ea8255d594fe1ccbebe0ee991bfc94d2f4c451b3708ea2990afc001158b3e2fe956c11576633e00619f76e0c200c96d5acc3168d20fb7bb2519355f2109663500118908af9c69df47af01ff433a0ea4b11db86fd20be97df818c6651874827c0d724886", 0x80}, {&(0x7f00000003c0)="6d777298e06d477c017127283f5287205d77aa20dd3e9a81d196ff4a6afdc9488adb9b4baadaa882f988aec606bfecca35324726aa7947041668954966264e77c4e146139fa769749cb85837ca7b5145e1fd0edd630b31fedc9c3bad690e0dc3cc59a5b1e846040519a2eee4bdecc3a906111776daca802bdc891dc8c6e8a73ace523a144cad34a2c0d1463e9c", 0x8d}], 0x7, r2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000001580)='/dev/audio\x00', 0x101100, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000015c0)={0x417, 0x6, 0x208, 0x1, 0x8a5, 0x7fffffff, 0x6, 0x1f, 0x0}, &(0x7f0000001600)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000001640)={r4, 0x1f}, &(0x7f0000001680)=0x8) r5 = getpid() setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000016c0)={0x3c, @dev={0xac, 0x14, 0x14, 0x18}, 0x4e22, 0x2, 'lc\x00', 0x1, 0x69e3, 0x42}, 0x2c) sched_setscheduler(r5, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:45 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) socket$vsock_stream(0x28, 0x1, 0x0) 14:21:45 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x1000000000000308, 0x0) 14:21:45 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="084000004951e05f4650f6954c61348ec0232594071bb1a04cf306b45c03ca4450361ce12801620000000000000000000000", @ANYRES64=0x0], 0x9b, 0x0, &(0x7f0000001200)="cfc48834fad7d75c3fd68d9e85c2935af2b0d2be0ba0411e3d7b64c0ab5d1a1138ffaa7afb0984dc0e5c4254b5f40992a27912c5ad6568b4f53ed708c2c1c3750885a6b5dab6833fec94d5a0a237b532f0274ec67022c8ab3ab367b2412e2772bf435ee3e3dd399fbe20841683ee4c927df3b863a2c09b0e22d93c65b9d4bb54f36a77a4accb38ea3e376bd7e1e8c92cc9aa19d150bed3c0fbd5dd"}) socketpair(0x11, 0x1, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001380)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000001580)=0xe8) stat(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000001680)={0xa0, 0x19, 0x2, {0x0, {0x2, 0x3, 0x6}, 0x174, r2, r3, 0x40, 0x2, 0x8000, 0x10000, 0x0, 0x400, 0x8000, 0x2, 0x800, 0x3, 0x6, 0x1f40, 0x80000001, 0x5, 0xf0}}, 0xa0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/null\x00', 0x200800, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000001300)=0x2, 0x4) socket$alg(0x26, 0x5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000001340)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x2c7, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="056304400100000008631040", @ANYRES64=r5, @ANYBLOB="01000000000000009ab56b912da63f0bd7e287b9d937eb1f0ddacdbf58ce0e48079950f20000cd330bbb9e7b2437755d3df1f242bff991f4f17e06ccd13e39834fdcdda54916d1cbef6e9b11eb81e778f557a24c03a1a2d212bb4783c99b8ede181e17e6fda848baaf4e680a1dfa226087333f11f3b12c35b8dd3387bddc7b57843378588c6fa5699fc7d28e7d5e5e0c46ed8a4729209efa1fa12f8170095513c65b0db843f7bf3c8e6b3a1cc481477c69b9b6888431619aed18b636ac4190bcdfafe05bea80fc8742cb129586381fbc0931ae23a62525437f"], 0x1000, 0x0, &(0x7f0000000200)="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"}) syz_read_part_table(0x9, 0x0, &(0x7f00000000c0)=[{&(0x7f00000017c0)="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", 0x46, 0x19}]) 14:21:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:45 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000400)={{0x7, 0x9}, 'port1\x00', 0x10, 0x81000, 0x2b, 0x8, 0x8001, 0xbe2, 0xfd2, 0x0, 0x4, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000340)) r3 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x6, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r4}}, 0x18) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f0000000040)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:45 executing program 4: clone(0x2144000, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xff, 0x400200) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000240)={"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"}) restart_syscall() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) [ 397.120553] binder: 22448:22456 BC_ACQUIRE_DONE u0000000000000000 no match [ 397.127749] binder: 22448:22456 unknown command -1779019706 14:21:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:46 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x1000000000000308, 0x0) 14:21:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 397.213997] binder: 22448:22456 ioctl c0306201 20000100 returned -22 14:21:46 executing program 5: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140)={0xffffffffffffffff}, 0x10) [ 397.256793] binder: 22448:22456 BC_ACQUIRE_DONE u0000000000000000 no match [ 397.263935] binder: 22448:22456 unknown command -1779019706 14:21:46 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000308, 0x0) [ 397.333012] binder: 22448:22456 ioctl c0306201 20000100 returned -22 14:21:46 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300), 0x99, 0x0, &(0x7f0000000200)="db14566e66af807c4748f06b92a5e5ff14a532d327e2ddf6f723757756e6e4e14e4778fbf78778a249fc7f5af165aaa95bf170cc59a2e026b63138864b730bddbe107b108e205faa5e30e4c0193a6e9b58623d15b801f2ca6c065e8211da9b198f132e2999b9620cf1e6d4f8921061c33ae4a487c6b1297241f58ca09a3962b81d64caffd5419567a8c86fe45b8a76c13666943fb84c5f8fb8"}) 14:21:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:46 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000308, 0x0) [ 397.489698] binder: 22487:22489 ioctl 227c 20000000 returned -22 14:21:46 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) sched_getaffinity(r0, 0x8, &(0x7f00000000c0)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x4}, 0x2) 14:21:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 397.582141] Unknown ioctl -1062710494 14:21:46 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000308, 0x0) [ 397.675424] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 397.682738] FAT-fs (loop5): Filesystem has been set read-only 14:21:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:46 executing program 6: inotify_init1(0x80000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:46 executing program 4: clone(0x9604ff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000080)=0x7) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:21:46 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='task\x00') sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @loopback, @multicast2}, &(0x7f0000000180)=0xc) getpeername$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@rand_addr}}, &(0x7f00000005c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'ip6gretap0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="0c040000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf250000000008000100", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="08d15ed7702ef01d219262737a3f0a295c000700000000000400", @ANYRES32=r6, @ANYBLOB="7802020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040006000000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400010000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000700000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040004000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000004000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400a9e50000"], 0x40c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:46 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000308, 0x0) 14:21:46 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x4040000, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x16) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:47 executing program 7: r0 = eventfd2(0xffffffff, 0x800) fcntl$notify(r0, 0x402, 0x8) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:47 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40442) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) write$cgroup_pid(r2, &(0x7f0000000200)=r3, 0x12) r4 = fcntl$dupfd(r0, 0x400000406, r0) setxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U-', 0x2}, 0x28, 0x0) getpeername$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) 14:21:47 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000308, 0x0) 14:21:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:47 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@ipv4={[], [], @broadcast}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000340)=0xc) setresuid(r2, r3, r4) semget(0x1, 0x6, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) r5 = semget$private(0x0, 0x3, 0x444) semctl$GETNCNT(r5, 0x3, 0xe, &(0x7f0000000440)=""/214) 14:21:47 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000240)={0x0, 0x0, 0x2080}) r1 = getpid() r2 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x9, 0x4240) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x600, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f00000000c0), 0xfe81) 14:21:47 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x100000, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x60001, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x1, 0x3, 0x0, 0x0, 0x7ff}}) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xb0, r2, 0x420, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1f}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x28}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffffff06}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x8}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) [ 398.287938] binder: 22487:22558 ioctl 227c 20000000 returned -22 14:21:47 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40442) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) write$cgroup_pid(r2, &(0x7f0000000200)=r3, 0x12) r4 = fcntl$dupfd(r0, 0x400000406, r0) setxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U-', 0x2}, 0x28, 0x0) getpeername$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) 14:21:47 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000308, 0x0) [ 398.388820] binder: 22575:22577 BC_ACQUIRE_DONE u0000000000000000 no match [ 398.421069] binder_thread_write: 2 callbacks suppressed [ 398.421081] binder: 22575:22577 BC_FREE_BUFFER u0000000000000000 no match 14:21:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:47 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="0000000000c4630840000000000000000000000000000000", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:47 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40442) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) write$cgroup_pid(r2, &(0x7f0000000200)=r3, 0x12) r4 = fcntl$dupfd(r0, 0x400000406, r0) setxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U-', 0x2}, 0x28, 0x0) getpeername$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) 14:21:47 executing program 1: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000308, 0x0) 14:21:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 398.665637] binder: 22598:22601 BC_ACQUIRE_DONE u0000000000000000 no match [ 398.672889] binder: 22598:22601 unknown command 64 14:21:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:47 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40442) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) write$cgroup_pid(r2, &(0x7f0000000200)=r3, 0x12) fcntl$dupfd(r0, 0x400000406, r0) setxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U-', 0x2}, 0x28, 0x0) [ 398.716617] binder: 22598:22601 ioctl c0306201 20000100 returned -22 14:21:47 executing program 1: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000308, 0x0) [ 398.760911] binder: 22598:22608 BC_ACQUIRE_DONE u0000000000000000 no match [ 398.768083] binder: 22598:22608 unknown command 64 14:21:47 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40442) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) write$cgroup_pid(r2, &(0x7f0000000200)=r3, 0x12) fcntl$dupfd(r0, 0x400000406, r0) [ 398.818599] binder: 22598:22608 ioctl c0306201 20000100 returned -22 14:21:47 executing program 7: r0 = accept4$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x7fd) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x1b, 0x2, 0x6, "4d0873d937ee5f08a56aebf8b6764e85", "54e8c4518980"}, 0x1b, 0x1) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0xad, 0x0, &(0x7f0000000180)="2342de00fbf8bcf0ea90e3a4c03b0ecc8a202b31100c0022e7ed79df13d3e9466d675960347be97c721a2917fb164510b44658518417671f75797338fa60208c2ebb35627272febb767ec0124a5c8c350b9830b5640579afdb5280f895d0edb84e5c0711908dcbf699c71f6be993cc66fc2c21060c3dd763380636a13d05280a0e5da837d7210191439b6e51c02e206f6946a2b36dcef7344264db4e89933bd2005ccaa2b71d8dde755302157e"}) 14:21:47 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x6) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) [ 399.034155] binder: 22626:22628 BC_ACQUIRE_DONE u0000000000000000 no match [ 399.047222] binder: 22626:22628 BC_FREE_BUFFER u0000000000000000 no match [ 399.062501] binder: 22626:22635 BC_ACQUIRE_DONE u0000000000000000 no match [ 399.069768] binder: 22626:22635 BC_FREE_BUFFER u0000000000000000 no match 14:21:47 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x7, 0x21, 0x2}, 0x7) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0x2, @ipv4={[], [], @remote}, 0x4}, {0xa, 0x4e24, 0x0, @mcast2, 0x1}, 0x8, [0x80000001, 0x400, 0x8, 0x100000000, 0x3, 0x4, 0x80000000, 0x1ff]}, 0x5c) r2 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, r2) sysfs$3(0x3) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:21:47 executing program 1: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000308, 0x0) 14:21:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:47 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40442) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) write$cgroup_pid(r1, &(0x7f0000000200)=r2, 0x12) 14:21:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:47 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() socket$unix(0x1, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:47 executing program 7: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x2, 0x800) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='md5summime_type\x00') r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="0000007e0000000003630840", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:47 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000045c900009500000000000000000000000000000006051f0001000000000000000000000095000000000000000000000000000000f577000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="1800000000020000000000", @ANYRES32=r0, @ANYBLOB="000000000000000004027f000800000000000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x5e, &(0x7f0000000240)=""/94, 0x40f00, 0x1, [], 0x0, 0x2}, 0x48) socket$unix(0x1, 0x5, 0x0) r1 = getpid() socket$nl_generic(0x10, 0x3, 0x10) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400040, 0x0) sched_setscheduler(r1, 0x9, &(0x7f0000000200)=0x2) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:48 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x1, 0xfffffffffffffeff, 0x3, 0x1000000, r0}, 0xfffffffffffffe1c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r1}, 0x10) [ 399.180304] binder: 22640:22653 BC_ACQUIRE_DONE u0000000000000000 no match [ 399.193998] binder: 22640:22653 BC_FREE_BUFFER u0000000000000000 no match 14:21:48 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000308, 0x0) 14:21:48 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40442) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) 14:21:48 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) 14:21:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb03"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:48 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40442) 14:21:48 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000308, 0x0) [ 399.420540] binder: 22681:22684 BC_ACQUIRE_DONE u0000000000000000 no match [ 399.485564] binder: 22681:22684 BC_FREE_BUFFER u0000000000000000 no match [ 399.514207] binder: 22681:22684 BC_ACQUIRE_DONE u0000000000000000 no match [ 399.552536] binder: 22681:22684 BC_FREE_BUFFER u0000000000000000 no match 14:21:48 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x100, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)={0x0, @aes256, 0x1, "fe93860631fa6a50"}) clone(0x2000, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:21:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb03"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:48 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:48 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000308, 0x0) 14:21:48 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=0x0, &(0x7f0000000140)=0x4) rt_sigaction(0x23, &(0x7f0000000480)={&(0x7f0000000300)="d9811ff43f202e660fd2d82ef30f38f67ae7470f688018a20000660fe41531000000c4423536fb26660fc5c79567f20f9afac48141d1a6df000000c4c27d199eafd20000", {0x1}, 0x8000000, &(0x7f0000000440)="c4222dae8b816f74f53665440f81000000002e3ef22ef0000c56410fc722c1eeec652e460f8800000020dadec4e2f92a730e43db3fc441e055ea"}, &(0x7f0000000580)={&(0x7f00000004c0)="8fa978c66fa9c4a228f30d000880413e2666420faeb200000021c461fd6fc240d8f340a90c0000000d0a00000064470f86dcabb38a66470f6ea8bc00000044189e0c000000", {}, 0x0, &(0x7f0000000540)="c46155e3e62ed9ed66881c27c4e1e5e084a106000000f041804a001ac461cd68e66664d9e18fa9e09408400f01d7c443ed7a0299"}, 0x8, &(0x7f00000005c0)) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r2, 0x400, 0xcc1, 0x2, 0x40, 0x9}, &(0x7f00000001c0)=0x14) accept$nfc_llcp(r1, &(0x7f0000000240), &(0x7f00000002c0)=0x60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) capset(&(0x7f0000000000)={0x399f1736, r0}, &(0x7f0000000040)={0x8, 0x80000001, 0xa5f, 0x9, 0x7b, 0x400}) accept(r3, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) fchdir(r3) 14:21:48 executing program 7: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x10, 0x7, 0xd75}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r1, 0x51, 0x1}, &(0x7f0000000180)=0x8) r2 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:48 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x8000, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x200, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x81, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000180)={0x0, 0x5}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40000, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req={0x8001, 0x6, 0xe2f, 0x8}, 0x10) 14:21:48 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000308, 0x0) [ 399.736845] binder: 22709:22718 BC_FREE_BUFFER u0000000000000000 no match 14:21:48 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0xc0045878, 0x0) 14:21:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 399.800852] binder: 22709:22721 BC_FREE_BUFFER u0000000000000000 no match 14:21:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb03"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:48 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000308, 0x0) 14:21:48 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x9e, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:48 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0xc0045878, 0x0) 14:21:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 400.038045] binder: 22738:22743 BC_FREE_BUFFER u0000000000000000 no match [ 400.045147] binder: 22738:22743 unknown command 0 [ 400.107813] binder: 22738:22743 ioctl c0306201 20000100 returned -22 [ 400.146933] binder: 22738:22743 BC_FREE_BUFFER u0000000000000000 no match [ 400.154006] binder: 22738:22743 unknown command 0 [ 400.159781] binder: 22738:22743 ioctl c0306201 20000100 returned -22 14:21:49 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpid() r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x2a) read(r1, &(0x7f0000000040)=""/103, 0x67) 14:21:49 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000308, 0x0) 14:21:49 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0xc0045878, 0x0) 14:21:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b00"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:49 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="000000000000000041f81949", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x40) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000200)={0xfd, 0x0, [0x1, 0x3, 0x8009, 0x4]}) setpgid(r1, 0x0) 14:21:49 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:49 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffff8, 0x40000) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000040)=0x7) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) [ 400.297522] binder: 22762:22769 unknown command 1226438721 [ 400.319275] binder: 22762:22769 ioctl c0306201 20000100 returned -22 14:21:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:49 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(0xffffffffffffffff, &(0x7f0000000100), 0x1000000000000308, 0x0) [ 400.342928] binder: 22762:22769 unknown command 1226438721 [ 400.359003] binder: 22762:22769 ioctl c0306201 20000100 returned -22 14:21:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b00"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:49 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0xfffffffffffffc00, 0x200000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="33f3561eaf301a3224510963ed40", @ANYRES64=0x0, @ANYBLOB="000000000000000003630840", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000140)=0x8, 0x4) 14:21:49 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(0xffffffffffffffff, &(0x7f0000000100), 0x1000000000000308, 0x0) 14:21:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) [ 400.561276] binder: 22796:22798 unknown command 509014835 [ 400.588533] binder: 22796:22798 ioctl c0306201 20000100 returned -22 [ 400.638789] binder: 22796:22804 unknown command 509014835 [ 400.656564] binder: 22796:22804 ioctl c0306201 20000100 returned -22 14:21:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x40000, @loopback}}, 0xb4) connect$pptp(r0, &(0x7f0000000040), 0x1e) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) accept4(r1, &(0x7f0000000040)=@hci={0x1f, 0x0}, &(0x7f00000000c0)=0x80, 0x80000) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@mcast2, @empty, @loopback, 0x4, 0x100000001, 0xff, 0x100, 0x2, 0x80000100, r3}) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='highspeed\x00', 0xa) 14:21:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:49 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(0xffffffffffffffff, &(0x7f0000000100), 0x1000000000000308, 0x0) 14:21:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b00"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:49 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x505a40, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x400}}, 0x18) getpid() 14:21:49 executing program 7: syz_extract_tcp_res$synack(&(0x7f0000000700), 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09591040", @ANYRES64=0x0, @ANYBLOB="000000000000000000634040030000000000000004000000000000000000000001000000000000000000000000000000000000000800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000002c0)}) recvmmsg(r1, &(0x7f0000004b00)=[{{&(0x7f0000000000)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/213, 0xd5}, {&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f0000000380)=""/155, 0x9b}, {&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f00000004c0)=""/211, 0xd3}], 0x5}, 0x100000001}, {{&(0x7f0000000640)=@nl, 0x80, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000006c0)=""/20, 0x14}, {&(0x7f0000000700)}, {&(0x7f0000000740)=""/50, 0x32}], 0x4, 0x0, 0x0, 0x3}, 0x9}, {{&(0x7f00000007c0)=@pppoe, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000000900)=""/66, 0x42}, {&(0x7f0000000980)=""/108, 0x6c}, {&(0x7f0000000a00)=""/180, 0xb4}, {&(0x7f0000000ac0)=""/143, 0x8f}], 0x5, &(0x7f0000000c00)=""/221, 0xdd, 0x8000}, 0x2}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000d00)=""/233, 0xe9}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/125, 0x7d}], 0x3}, 0x7ff}, {{&(0x7f0000001ec0)=@l2, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f40)=""/76, 0x4c}, {&(0x7f0000001fc0)=""/97, 0x61}, {&(0x7f0000002040)=""/94, 0x5e}, {&(0x7f00000020c0)=""/85, 0x55}], 0x4, &(0x7f0000002180)=""/4096, 0x1000, 0x5}, 0x2}, {{&(0x7f0000003180)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000004680)=[{&(0x7f0000003200)=""/205, 0xcd}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/133, 0x85}, {&(0x7f00000043c0)=""/115, 0x73}, {&(0x7f0000004440)=""/254, 0xfe}, {&(0x7f0000004540)=""/222, 0xde}, {&(0x7f0000004640)}], 0x7, &(0x7f0000004700)=""/228, 0xe4, 0x81}, 0x2}, {{&(0x7f0000004800)=@ax25, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004880)=""/44, 0x2c}, {&(0x7f00000048c0)=""/204, 0xcc}, {&(0x7f00000049c0)=""/57, 0x39}], 0x3, &(0x7f0000004a40)=""/189, 0xbd, 0x9}, 0x5}], 0x7, 0x40, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000004cc0)={r2, @local, @remote}, 0xc) 14:21:49 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0xfffffffffffffd4d) 14:21:49 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) [ 400.837379] binder: 22821:22827 unknown command 1074813193 [ 400.875405] binder: 22821:22827 ioctl c0306201 20000100 returned -22 14:21:49 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x100000, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x60001, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x1, 0x3, 0x0, 0x0, 0x7ff}}) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xb0, r2, 0x420, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1f}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x28}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffffff06}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x8}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) 14:21:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 400.930296] binder: 22821:22835 unknown command 1074813193 [ 400.937596] binder: 22821:22835 ioctl c0306201 20000100 returned -22 14:21:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b000000"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:49 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:49 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x48, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30, 0x18, &(0x7f0000000000)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}], &(0x7f0000000080)=[0x28, 0x18, 0x28]}}, @exit_looper], 0x1000, 0x0, &(0x7f0000000200)="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"}) 14:21:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b000000"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 401.156121] binder: 22857:22860 got reply transaction with no transaction stack [ 401.163851] binder: 22857:22860 transaction failed 29201/-71, size 48-24 line 2762 [ 401.230338] binder: 22857:22866 got reply transaction with no transaction stack [ 401.238003] binder: 22857:22866 transaction failed 29201/-71, size 48-24 line 2762 14:21:50 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x1, 0x6, 0x7dab, 0x3}) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@mcast2, 0x0}, &(0x7f0000000080)=0x14) connect$packet(r1, &(0x7f00000000c0)={0x11, 0x1d, r2, 0x1, 0xcf0, 0x6, @dev={[], 0x15}}, 0x14) 14:21:50 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:50 executing program 7: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x101, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="00000000000009009378aefb80730dbf951674610e0000000000004800afcb0d28bc70a60080dedef04a93c30fa2fc385fe6101fee51af08b0957497f6c0db1982bd68b01234382ebad3494f1487975bd6efb9a445360fabcbfabf3609b5c68a3e6e1472ca35e4514fa8b534106adec69f038d7e925e167ad6260e356368ee37167b773bad9eb87813754910017a8240818ca30682660e93734e713b971961b828ee94c0f54441274daee79ac5ee58c4ee5f8acff8340f2d7955656b5ce9f8b21798ad658ddde9fb03feba3422f36624a312ead59139ad14f319ce3473bea068d0e5543375bcaeb57986312193", @ANYRES64=0x0], 0xec, 0x0, &(0x7f0000000340)="2c216290867834c987a8138386042cc843c56299fd6209ffc6ab17e63d8df6db278281d6fecfab237e6a37d2177c26542058826ec26dca29889f9014a327e342c104cbaca6477850c985f2d3b5840275ba6a16f9b41858370f4141c61f956d4797fccbaa0e01ab763583a1320144aab1140cb52cb9fa62052d445943b306e62ea6379f38449e9f7acc07d4fe7ebed0cd29fca11f97df6905be966c506484e4ad3acd53730f723b9e3d3abec2e12d2315779efe5f584b8ae46f34f6455a3546a082e2d83be1173dd8c43a0158333d0ae889fb162601f4a40d3206981766177395d17ad60ff5d802d127da996d"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getaddr={0x54, 0x16, 0x310, 0x70bd28, 0x25dfdbfc, {0xa, 0x38, 0x0, 0xff, r2}, [@IFA_ADDRESS={0x14}, @IFA_LOCAL={0x14}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x100000001, 0x9, 0x8}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x44000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000004c0)={0x0, 0x8f, "f5b620ca51e5e753d535f86892933e58476992892ade968549648cf12ad4b76a7315b490a8437f5e8747f19d3eec504099b3996b4495a4432cb3b872aee905b8811736d9db01dc6c73cb15bfc8c0839efb8f46b07e4982dcc960aa9cee3f11276669a072d7c012919e3ca142c5aa190d607718ee1712fb63b3fc5a69dfba4de7df38ac936fe05063c7ca5050dcc685"}, &(0x7f0000000040)=0x97) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000580)={r3, @in={{0x2, 0x4e24}}}, 0x84) 14:21:50 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:50 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x410000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000000c0)={{0x32, @multicast1, 0x4e23, 0x0, 'lc\x00', 0xa, 0x7ff, 0x42}, {@loopback, 0x4e20, 0x2000, 0x8001, 0x57, 0x400}}, 0x44) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x200, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0xec5e, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:50 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)=r1) 14:21:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b000000"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:50 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:50 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 401.438951] binder: 22880:22888 unknown command -72451949 [ 401.465742] binder: 22880:22888 ioctl c0306201 20000100 returned -22 [ 401.493737] binder: 22880:22895 unknown command -72451949 [ 401.509484] binder: 22880:22895 ioctl c0306201 20000100 returned -22 14:21:50 executing program 1: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x22040, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:50 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:50 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b00000000"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:50 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40080, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/38) 14:21:50 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000140)={{0x2, 0x4e20, @broadcast}, {0x1, @local}, 0xe, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 'nr0\x00'}) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) socketpair(0x11, 0x800, 0x16a14d20, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80020200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x572b}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000040)) 14:21:50 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x80) bpf$MAP_DELETE_ELEM(0x9, &(0x7f00000001c0)={r1, &(0x7f0000000180)}, 0x879892ae) r2 = semget$private(0x0, 0x3, 0x41) semctl$GETZCNT(r2, 0x2, 0xf, &(0x7f0000000240)=""/212) 14:21:50 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) r2 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000000c0)='\x00', 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r2, 0x4) 14:21:50 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:50 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='#\x00', 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000100)="66a7b117d1a1dc71b3a4ef1b24473b1e4ae76893b22c741543062424bee5047168e7cc13b0b67069fa6c21970b9d781c52bd460a16915b4237fb2c086d8f4d6e88e4e7385c74d104fdad3920", &(0x7f0000000200)=""/4096}, 0x18) prctl$getname(0x10, &(0x7f0000001200)=""/117) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000001280)='trusted.overlay.upper\x00', &(0x7f00000012c0)={0x0, 0xfb, 0x1b, 0x1, 0x2, "f006ee9daa1551a6ee33e78b7fd40a86", "273dd35f5239"}, 0x1b, 0x3) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) 14:21:50 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) getpid() r0 = open(&(0x7f0000000040)='./file0\x00', 0x60880, 0x1) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e21, 0x9, @empty, 0x3}}, 0x81, 0x3, 0x0, "4bc173a6b97260914218bc628a50d1a9820fd0f8f9f3b3b2188cd69653045fb6e58a6e37274032ac06bdf8424bfda575fa0119c1a67061218fd99872a39fe6313e81820db723f5107a91e5e0288c3ec4"}, 0xd8) ioctl$TIOCSTI(r0, 0x5412, 0xef) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket$pptp(0x18, 0x1, 0x2) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:50 executing program 7: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KDADDIO(r0, 0x4b34, 0x1) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x2, 0xa8a]) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@int=0xe8e3, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000040)=[@enter_looper, @free_buffer], 0x35, 0x0, &(0x7f00000002c0)}) 14:21:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b00000000"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:50 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:50 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='#\x00', 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000100)="66a7b117d1a1dc71b3a4ef1b24473b1e4ae76893b22c741543062424bee5047168e7cc13b0b67069fa6c21970b9d781c52bd460a16915b4237fb2c086d8f4d6e88e4e7385c74d104fdad3920", &(0x7f0000000200)=""/4096}, 0x18) prctl$getname(0x10, &(0x7f0000001200)=""/117) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000001280)='trusted.overlay.upper\x00', &(0x7f00000012c0)={0x0, 0xfb, 0x1b, 0x1, 0x2, "f006ee9daa1551a6ee33e78b7fd40a86", "273dd35f5239"}, 0x1b, 0x3) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)) 14:21:50 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)=0xfffffffffffffffd) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:50 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x78, 0x0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000002c0)}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x7f}, 'port1\x00', 0x80, 0x100000, 0x1, 0x4, 0x2, 0x1, 0x1f, 0x0, 0x4, 0x3}) 14:21:50 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b00000000"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 402.164428] binder: 22978:22982 unknown command 1986356271 [ 402.189940] binder: 22978:22982 ioctl c0306201 20000000 returned -22 [ 402.214376] binder: 22978:22982 unknown command 1986356271 [ 402.243884] binder: 22978:22982 ioctl c0306201 20000000 returned -22 14:21:51 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) r1 = fcntl$dupfd(r0, 0x0, r0) sysfs$3(0x3) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), 0x4) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:51 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)="e3874e7d77d309ce8e78426ac61d1f2edb0b8b478074c4ee2bd77ca5a13003763d8af96199b053d83512a610db01ec49e22d70113271e690bcfb77c3f65b88b096bc1b7e80bcc0c54378406422d13eb315af8beaa9009b6a446145c1997dde215db5530a5f27dd166d0c79051997d882807120a9f06d1ef400788f0ff30026406713f23ad2357580a3c460b4bf1998077763af26eb41b3173b16ef838c67301e861a0237119344728c8987db79f9ec47035fe1d0f084b747", 0xb8, 0xfffffffffffffff8) keyctl$update(0x2, r2, &(0x7f0000000180)="25c17c19403c98d29790568035d832914a846f5344ad779a63fb1a612d3774c7c5324d4c2b7a8a4a8bc8f14286ca47", 0x2f) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x417d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111, 0x39570fcc16d0a1a3}}, 0x20) 14:21:51 executing program 1 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000308, 0x0) 14:21:51 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0xc0045878, 0x0) 14:21:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:51 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='proc\x00', 0xffffffffffffff9c}, 0x4) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x20000) 14:21:51 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xab, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="0000000000000000036308409a98a49d7c2e14034e24316d3fa8ae52aebf85d30cdf4eec4e923dfe7781a65f7ab9a4e40b9f7131ae0c468525c61e98e6848fc09a8792ddbb084ba22dcafc66739230fe14af3ffff06781cc630e7a5007755f1d8dffb450d7e9fbefe91d6bf56feebca1cab9dfc29aef9c419e96ff72da74a8f5dab45d28c70baa4f2403299a8482aebb002c900e20f3c1", @ANYRES64=0x0], 0x92, 0x0, &(0x7f00000002c0)="e3d4e85f9a6f9d74952dc083fe697c917688572100c8f977a02624e5d894eb572170469c9430b46e645ac8a036cf34e687df11bd1df71931cde503cb5f3e63d6427a4ba0376be7cb7ea3cb2b075a054b5b2db1a69ac7df0deed766f061a5804c297394312bb169e860aeb1bf8e614882aa56fe464bdc29250edab373c411767f0871086e949dcddbbfda40e150fb69f8b50c"}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x186) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) [ 402.399211] binder_thread_write: 12 callbacks suppressed [ 402.399230] binder: 23008:23015 BC_ACQUIRE_DONE u0000000000000000 no match [ 402.413241] binder: 23008:23015 unknown command 1831937102 [ 402.419810] binder: 23008:23015 ioctl c0306201 20000100 returned -22 [ 402.429682] binder: 23008:23015 BC_ACQUIRE_DONE u0000000000000000 no match [ 402.439267] binder: 23008:23015 unknown command 1831937102 [ 402.448881] FAULT_INJECTION: forcing a failure. [ 402.448881] name failslab, interval 1, probability 0, space 0, times 0 [ 402.460233] CPU: 0 PID: 23020 Comm: syz-executor1 Not tainted 4.19.0-rc2+ #3 [ 402.467433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.476886] Call Trace: [ 402.479492] dump_stack+0x1c9/0x2b4 [ 402.483141] ? dump_stack_print_info.cold.2+0x52/0x52 [ 402.488349] ? mark_held_locks+0x160/0x160 [ 402.492603] should_fail.cold.4+0xa/0x11 [ 402.497117] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 402.502228] ? dput.part.26+0x276/0x7a0 [ 402.506231] ? graph_lock+0x170/0x170 [ 402.510038] ? graph_lock+0x170/0x170 [ 402.513853] ? find_held_lock+0x36/0x1c0 [ 402.517945] ? check_same_owner+0x340/0x340 [ 402.522276] ? rcu_note_context_switch+0x680/0x680 [ 402.527223] __should_failslab+0x124/0x180 [ 402.531479] should_failslab+0x9/0x14 [ 402.535288] __kmalloc+0x2b2/0x720 [ 402.538837] ? rcu_is_watching+0x8c/0x150 [ 402.542991] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 402.547845] ? rw_copy_check_uvector+0x361/0x3e0 [ 402.552618] rw_copy_check_uvector+0x361/0x3e0 [ 402.557290] import_iovec+0xcf/0x470 [ 402.561021] ? dup_iter+0x270/0x270 [ 402.564667] ? proc_cwd_link+0x1d0/0x1d0 [ 402.568780] vfs_readv+0xf5/0x1c0 [ 402.572251] ? compat_rw_copy_check_uvector+0x440/0x440 [ 402.577634] ? __fget_light+0x2f7/0x440 [ 402.581629] ? fget_raw+0x20/0x20 [ 402.585119] ? __sb_end_write+0xac/0xe0 [ 402.589113] do_preadv+0x1cc/0x280 [ 402.592697] ? do_readv+0x310/0x310 [ 402.596340] ? __ia32_sys_read+0xb0/0xb0 [ 402.600413] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 402.605788] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 402.610910] __x64_sys_preadv+0x9a/0xf0 [ 402.614896] do_syscall_64+0x1b9/0x820 [ 402.619140] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 402.624517] ? syscall_return_slowpath+0x5e0/0x5e0 [ 402.629464] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 402.634314] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 402.639336] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 402.644367] ? prepare_exit_to_usermode+0x291/0x3b0 [ 402.649393] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 402.654250] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 402.659446] RIP: 0033:0x457099 [ 402.662645] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 402.681568] RSP: 002b:00007f3375e5bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 402.689284] RAX: ffffffffffffffda RBX: 00007f3375e5c6d4 RCX: 0000000000457099 14:21:51 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0xc0045878, 0x0) 14:21:51 executing program 6: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000040)=0x80000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x2) sched_setscheduler(r2, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r1}, 0x10) [ 402.696556] RDX: 1000000000000308 RSI: 0000000020000100 RDI: 0000000000000004 [ 402.703826] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 [ 402.711102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 402.718371] R13: 00000000004d3f30 R14: 00000000004c8916 R15: 0000000000000000 [ 402.729497] binder: 23008:23015 ioctl c0306201 20000100 returned -22 14:21:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:51 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040626b926f51fb02f7c87044db94f993297f7288a594f0e92a60e5860fd06877249d1513ebca68f50e3ca086aaaf7ff440a2bf7756b19c350b03891ef497d0f45b7089", @ANYRES64=0x0, @ANYBLOB="000000000003630840000000", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) [ 402.857723] binder: 23035:23037 BC_ACQUIRE_DONE uf702fb516f926b62 no match [ 402.864900] binder: 23035:23037 unknown command -1517784449 [ 402.871376] binder: 23035:23037 ioctl c0306201 20000100 returned -22 [ 402.878861] binder: 23035:23037 ioctl 400c6615 20000000 returned -22 [ 402.886897] binder: 23035:23037 BC_ACQUIRE_DONE uf702fb516f926b62 no match [ 402.894031] binder: 23035:23037 unknown command -1517784449 [ 402.900352] binder: 23035:23042 ioctl 400c6615 20000000 returned -22 14:21:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:51 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) r1 = dup2(r0, r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@rand_addr, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x2, 0x490, [0x0, 0x20000480, 0x200004b0, 0x200008b0], 0x0, &(0x7f0000000000), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x7, 0x20, 0x6caece3f96e4e46c, 'erspan0\x00', 'vcan0\x00', 'gre0\x00', 'vlan0\x00', @local, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @broadcast, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0xb0, 0x258, 0x288, [@devgroup={'devgroup\x00', 0x18, {{0x1, 0xfff, 0x101, 0x101, 0x1f}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x81, 'system_u:object_r:ksm_device_t:s0\x00'}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x7, 0xcbc, 0x3, 0x1, 0x0, "1d256a3a190237adc847232e70528f1528892b56d58bc2914f0221969c4535564a6fee182620e73e0f2586ff38ea4487d3a8626813753179c91c45e5259b7694"}}}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x5}}}}, {{{0x11, 0x7, 0x8137, 'bridge_slave_1\x00', 'tunl0\x00', 'bridge0\x00', 'irlan0\x00', @random="5775fa340377", [0xff, 0xff, 0xff, 0x0, 0xff], @random="52c1a9c32e32", [0x0, 0x0, 0xff, 0x0, 0xff], 0x100, 0x100, 0x148, [@nfacct={'nfacct\x00', 0x28, {{'syz1\x00', 0xee44}}}, @owner={'owner\x00', 0x18, {{r2, r3, r4, r5, 0x4, 0x3}}}]}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x8, 0x3, 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x508) [ 402.907335] binder: 23035:23037 ioctl c0306201 20000100 returned -22 14:21:51 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0xc0045878, 0x0) 14:21:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:51 executing program 1 (fault-call:3 fault-nth:1): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000308, 0x0) [ 403.075568] FAULT_INJECTION: forcing a failure. [ 403.075568] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 403.080105] binder: 23049:23055 BC_ACQUIRE_DONE u0000000000000000 no match [ 403.087437] CPU: 0 PID: 23057 Comm: syz-executor1 Not tainted 4.19.0-rc2+ #3 [ 403.087449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.087459] Call Trace: [ 403.087487] dump_stack+0x1c9/0x2b4 [ 403.087516] ? dump_stack_print_info.cold.2+0x52/0x52 [ 403.087540] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 403.106863] binder: 23049:23055 BC_ACQUIRE_DONE u0000000000000000 no match [ 403.111143] ? perf_swevent_event+0x158/0x2e0 [ 403.111177] should_fail.cold.4+0xa/0x11 [ 403.111206] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 403.111227] ? print_usage_bug+0xc0/0xc0 [ 403.111246] ? perf_swevent_event+0x2e0/0x2e0 [ 403.157460] ? mark_held_locks+0x160/0x160 [ 403.161730] ? perf_tp_event+0xc40/0xc40 [ 403.165815] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 403.170946] ? memset+0x31/0x40 [ 403.174251] ? perf_trace_lock+0xde/0x920 [ 403.178414] ? perf_trace_lock_acquire+0x4f9/0x9a0 [ 403.183370] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 403.188921] ? should_fail+0x246/0xd86 [ 403.192829] ? zap_class+0x740/0x740 [ 403.196561] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 403.201707] __alloc_pages_nodemask+0x365/0xd10 [ 403.206405] ? __alloc_pages_slowpath+0x2cb0/0x2cb0 [ 403.211456] ? find_held_lock+0x36/0x1c0 [ 403.215580] ? trace_hardirqs_off+0xb8/0x2b0 [ 403.220014] cache_grow_begin+0x91/0x710 [ 403.224105] __kmalloc+0x641/0x720 [ 403.227679] ? rcu_is_watching+0x8c/0x150 [ 403.231855] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 403.236544] ? rw_copy_check_uvector+0x361/0x3e0 [ 403.241327] rw_copy_check_uvector+0x361/0x3e0 [ 403.245944] import_iovec+0xcf/0x470 [ 403.249696] ? dup_iter+0x270/0x270 [ 403.253361] vfs_readv+0xf5/0x1c0 [ 403.256874] ? compat_rw_copy_check_uvector+0x440/0x440 [ 403.262271] ? __fget_light+0x2f7/0x440 [ 403.266265] ? fget_raw+0x20/0x20 [ 403.269765] ? __sb_end_write+0xac/0xe0 [ 403.273776] do_preadv+0x1cc/0x280 [ 403.277337] ? do_readv+0x310/0x310 [ 403.280982] ? __ia32_sys_read+0xb0/0xb0 [ 403.285063] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 403.290442] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 403.295576] __x64_sys_preadv+0x9a/0xf0 [ 403.299574] do_syscall_64+0x1b9/0x820 [ 403.303475] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 403.308857] ? syscall_return_slowpath+0x5e0/0x5e0 [ 403.313804] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 403.318846] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 403.323877] ? recalc_sigpending_tsk+0x180/0x180 [ 403.328648] ? kasan_check_write+0x14/0x20 [ 403.332929] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 403.337800] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 403.343001] RIP: 0033:0x457099 [ 403.346213] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 403.365131] RSP: 002b:00007f3375e7cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 403.373341] RAX: ffffffffffffffda RBX: 00007f3375e7d6d4 RCX: 0000000000457099 [ 403.380624] RDX: 1000000000000308 RSI: 0000000020000100 RDI: 0000000000000004 [ 403.387918] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 403.395199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 403.402478] R13: 00000000004d3f30 R14: 00000000004c8916 R15: 0000000000000001 14:21:52 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) setuid(r0) getpid() getresgid(&(0x7f0000000340), &(0x7f0000000700)=0x0, &(0x7f0000000740)) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffff8000, 0x5, &(0x7f0000000680)=[{&(0x7f0000000200)="23f3c75080eb7d410ab2bd5e8697f9ec484b6024f0dd0ef677115dfb85f5d00dc6ea2b1ec69ed574f53c1cd61a350fa96f5217539eabbc9776ef01f29bd896a1373b15f74d84dbb261df7c471c8b1df7e9265c36c0460232546902b381cf6e51840f340aa235a5f406b5d91f61eef61eb3aab4c9b98780b6e48a4f5c8745ea85d109d528de672f7de5b829cf0cf3ba9bc2494ff58da1d1111ab95a1e8849e79df8dff7f8c710dad892e26fb05e6418fb76b9b0a0685e895516b876b8ac50a487433b15f760ca83c83fe6dfc821e6c7f19a2d3374eab737fb4c", 0xd9, 0x40}, {&(0x7f0000000300)="35cbf623b35d9df2fe320a8dc02d368c528e4244597065ec", 0x18, 0x2}, {&(0x7f0000000440)="01ac08077ec137c0cf6386291aa8380f7db77319d472362591003bd659a0c87ac18ecbeb0efd3cd1829ca47bf9b9bf389d66d0bff6a24bb280367e70ca88e7df81f8282ea0970579a35f13250cbf265e32b3d8eea90d8b481efafac8d84ce23a6266c1599285b54703f4ec5c816bd996e555f6a32013c652bc08e47e88cb0d8bbf23bae25160033756aaf84cf463df864999e51cdf8e70e5f8", 0x99, 0x400}, {&(0x7f0000000500)="04b4a639d8897d69800acafcfed80ecf7a842f41f95eade4a7c1f1a88a88ff418b1a624bd158759a46a83008ecb6fbb85c970516c84e6e0ba1453a2703896cc5c3cb6aec102ddeadc3d5a9021a09fe7c31e65851ead164b7318056b93bb780181b8085cb24b816ca63b5a47b59f1cd312b71e3256e51d96d05289218133d0e182a3d0349ec6ae3221fff345805094ba111ccc3d9391f54b4f65ba6b19a4646c43ed290290459cbba5b", 0xa9, 0x800000000000000}, {&(0x7f00000005c0)="2de12927194dfda58fe5e21a268333c36beb173e067c8192c1c5942e9b86579f6888fcc7a4ff7ae12d8f31c3c1031b95799409036f9323198e323a5fa212c2659ee8d6f2384945d1e3959a1a9b41e76af891ef4f6140c7efbf3953619bbd6a4ab7d88e428b31ea50781b800e0d1871b0292448ae37cc4695b80f5c343cc8fa139b19305ba8d2218b92b6d9f68c2497c3c782fc81773e189400d5ea4cd96152649c7c06ca88fc360cbd46fafa00f74442c030e4cd4015159598522ff4682181", 0xbf, 0x3}], 0x8000, &(0x7f0000000780)={[{@nointegrity='nointegrity'}, {@errors_remount='errors=remount-ro'}, {@gid={'gid', 0x3d, r1}}, {@nodiscard='nodiscard'}]}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept(r2, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 14:21:52 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1fd159c7b53daba6d909631040", @ANYRES64=0x0, @ANYBLOB="000000000000000003630840", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:52 executing program 5 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x0, 0x0, [0x48f]}) [ 403.552133] binder: 23064:23067 unknown command -950415073 [ 403.600687] binder: 23064:23067 ioctl c0306201 20000100 returned -22 14:21:52 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0xfffffd9e) 14:21:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:52 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x800001, 0x0, 0x1, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() getpeername(0xffffffffffffff9c, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000180)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r3 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x200, 0x100) write$P9_RRENAME(r3, &(0x7f0000000280)={0x7, 0x15, 0x1}, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', r2}) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x204000) write$P9_RSETATTR(r4, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7) 14:21:52 executing program 3: clone(0x34000, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:52 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/190, 0xbe}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/50, 0x32}, {&(0x7f00000000c0)=""/25, 0x19}, {&(0x7f00000002c0)=""/189, 0xbd}], 0x3, 0x0) r2 = dup3(r0, r0, 0x80000) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000380)={0x5, {{0x2, 0x4e24, @broadcast}}}, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x0, 0x0, [0x48f]}) 14:21:52 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() epoll_create(0x24330b7e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x101000, 0x20) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000240)=0x4) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x20000) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) [ 403.831009] binder: 23089:23096 BC_ACQUIRE_DONE u0000000000000000 no match [ 403.850200] binder_thread_write: 8 callbacks suppressed [ 403.850215] binder: 23089:23096 BC_FREE_BUFFER u0000000000000000 no match 14:21:52 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x3, 0x462000) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000540)={0x2, 0x2, 0x2, 0xff, &(0x7f00000004c0)=[{}, {}]}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) connect$pppoe(r0, &(0x7f0000000600)={0x18, 0x0, {0x2, @empty, 'veth0_to_team\x00'}}, 0x1e) r2 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) write$P9_RWSTAT(r2, &(0x7f00000001c0)={0x7, 0x7f, 0x2}, 0x7) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={0xffffffffffffff9c}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@loopback, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@rand_addr}}, &(0x7f00000000c0)=0xe8) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000007c0)={'veth1\x00', {0x2, 0x4e24}}) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x400000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000680)={r6, @in={{0x2, 0x4e20, @broadcast}}, 0xff, 0x6}, 0x90) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e24, 0x0, @local, 0xdf98}], 0x1c) connect$vsock_stream(r3, &(0x7f0000000740)={0x28, 0x0, 0x2710, @reserved}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, &(0x7f0000000240)={{0x6, 0x6, 0x3, 0x8000, '\x00', 0x5}, 0xfffffffffffffffe, 0x140, 0x4, r1, 0x1, 0x1, 'syz0\x00', &(0x7f0000000040)=['md5sumbdev\x00'], 0xb, [], [0x7, 0x7f, 0x7, 0x5]}) 14:21:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5451, 0x0) 14:21:52 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000308, 0x0) 14:21:52 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x3, 0x40000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) 14:21:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x0, 0x0, [0x48f]}) 14:21:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0x0) 14:21:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:53 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0663104061db0059cd46b14bf6c56b779c5a86e80b060ffcdfdcfbe7874310cf9af301dc941b8a78e9c332a9a49500013f3b5f9b43b5912f2a860800000049fe37c81035dbb5eaad2da5706dbb40000000000000003d4ac729000000000000000000", @ANYRES64=0x0, @ANYBLOB="000000000000000003630840", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x74100) ioctl$TIOCNXCL(r1, 0x540d) 14:21:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5452, 0x0) 14:21:53 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x100000000000006a, 0x0) [ 404.334206] binder: 23151:23154 unknown command 1074815750 [ 404.349107] binder: 23151:23154 ioctl c0306201 20000100 returned -22 [ 404.383169] binder: 23151:23154 unknown command 1074815750 [ 404.397830] binder: 23151:23154 ioctl c0306201 20000100 returned -22 14:21:53 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = dup(0xffffffffffffffff) io_setup(0x3, &(0x7f0000000040)=0x0) io_submit(r1, 0x3, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, r0, &(0x7f0000000440)="6c209237778d6cbb52b1666304bc92c3f07604b71c4ace60c69b1b58f7aa4b739e508705a01f15ef723d238f714077513867f42cdbe05bfe3b1471f6dd16f89e7505843309070009bc1f09c97b7b7483ba8f91b1e7d7073e23da2e35f33ce3c5db3356777576a7bd46e2b94d635c970dbdfad260d2e6c913f30d1f06344d6ecf852d73fd6c1e22df88cfba9b70fdf0866bf1dce24f07143e568b683fb4558c4e51b9a5bbf5c9c0b1e38cbd9a0c847866eeb57a668fc9093060060378fbd7a050230cf4cc5d41873338938bf7ce33353fd6c4af335aa4212535330e926865533c3c1e124494b962450aa91b481b8a6f4426ca7bc74ff1fe3772241a5101389b7c8fc2e18accedca65d0d00f3c1ffb8085cc34c591b159bbfced15736a7f9a3527cdf3e597db35d8009a263d2e1b5c49344a9189d04a7103ab8a8cd96577db38084187c934f3ca9f94519cb02f6028cdd12cb790b51e59801b8aca2c223b2ba598cb68c75df77d8f179a5817f73007d7fdf636dc289801095d973c6edde526241a093e72117867e69ffd40e6805899eaead650b56f3378dc69da82d0b2e0b2be216a3832f1f8e59f676e4bf389c02e60672f2ee87332a923ec6f7893822c037924ca42e61cf47bb98de3a177867bde4ca0e573b53e453baf4cef56d2a28f03b355b601e336f1dfc0f40d5ccce399eb9154cb2db02660cb43fd35748a2edd5c0bd4e61f551c3d673ec62dd2f5b4ed086f3c8d390023dda72054a5268c76ae859824df4b970e0c25f4a8c3bc3f052d92d2fb6e572dd39bc9d84e12567e08707e59ec95c3e4d53f9c020d9f575a4d950853bde34fd2243d9406410807650d475df83af2beee08438b15d2cdf02e31decdef950fd020e3a8c6dd56b2b6b10ea17c7b764d7d3c7c48adf07b9bbbcce01e5c785c81fd6a4df2d46521b36f36c49751375ff05a83be7734819889e44b4b2d543578b1fcea19c80023c3419c81e7c5a4f33c9b86a55dead96669ce28c6f6dfc410371f9da3b802bd8fad9b02a7abd4eaadd2cd5871215d681b371caaf142a0808a1e4692e4323e061d177f759c80392639e30d71e8a5ef217c268af20f97b255c3fa8a6085e5e547989ecc304af18b8e59924982065e6464da58e7311e5baae3c46ee98e7ef1b32d4b2adbd24fa86a81cf0e19819bc18dfe0ee3f82e9f9993dfc380b7118b33c63ed47432b9a85c863085e37fc4d99e1207f9d71118438409c7e2c56eb74fa061fe8702e7405aaecb14f4bc88f467fb1981c7787cf0e4cc6beab1c507d74e86ee4b587a08742043bb5765bae44a325e189268b7be649e96ec64236417810fa218f7500b62b5068677d2ed01e17859e1975817bd1b5994b2ee9da1e97277ae3d5ef337fea63d06ac1d03de1a7592af1b1fe95d8ded82820045bed4832283c8a59a39d2f5b9ec5cd2f45ea2f5577883dd17dd6d8b6373ff5dae9a8d6911f6e51a4e120eec9f1d743c9a2c7a8d3d707d7a609fd57b3f44b7c5d0d82e3e06fec04c9a13b1c9afbad4ae5f5e397a70ccc470d074215987a7b6e893fcd59b3ccaa7fb8cd1fb4358825c7cf59eb3a99f0c2dc89b04050146286e9664f56d121c7fe7b645335c9ffe9e8ff20aa1ebc11105c65bc655a74bbf274688419d0f6213b6c803c5f1cfd9cffaf9554bc4d74789ecac8e23f059f8d163c2b64b0f144909b66f70f31fd371be2371e5f3e59f15220589532e2ec91dfc91e7e5546667fcd1015b01a874aec973cc67352f6913ef67aff3f7eb4e6fd2b9721d2409955f6018e0e0a1ef850b10fc24461a517d1ec5dda5423fd91cd15bda053889262ad753f141924cdd3ba0ae28e55ac402a1d628efb653cff4b57cdc1566145400aa639a2be0298038f04c717ee6f08baf7daafc9777201db4b54bcd73a1fc742fe97d7f0d54ff0276ee8ca1cf2328f00fcde0e30c256f961d09f7853667190fd2b8993d0a25f1131034a3d132901afa24bd87b69522de4c1a1f8c43d01df939d6ce10d5508ff779891180821d0ecfb10910ac29e3af775601d3d5c8086e938c340f458f58141f73ccf7648bb17abf48e6d1f2930de2558278edf7e58a02a87aacd6aa0dcc72a6ea52b530b05e5740b2fa4823f0f139fd74836fed2ab95899d220e02f1bc6b636e14244c97746d9b6d97b6e5044aa4a3ff933583cca759aba327e75e13546ed485a362a283411e08caf5c142bb8cb4b2329a4f4f8bc08bc974861a48b49a09ef3b2c32bb3231a1b123157dec4d82cdafc4969957d3af301e6354a8400cc80601dbb5787ab05b9cf73f1d3d1ded4f8913117e0e379ef14ce81d68a9c36f1d9f240bea92bf697a3aba4b43b4d46d6ae879f52b3e6b0e216e956ead253fc8eb4556e7860cbe83bfea4cb59970f4980a115ffc7eeab6a072ad4f663aedeace8f38aaa0427fd172d4b65eb892be8b8e49c86ddbb77d1f9abb32010243d53e30f12f5999ab5d48cf68419f4b31c9897bb1392ce6c40f901efd8a4df814f0aaa37a6b93cc2665349bc25b2ade497f827b907734459d29b3c9bda098f02e98fb759fa1aba321807cafbeee680ae171d8a043bcf417688004824c6f8c6e016c410fdba274dcb9e53bd6c886ff2c7b27593f3f89395de0132fe6c96373f1bc7b73edcb90c7becce75a6795e391b38b36949de72c2a0f7d728e3850af1599a1caa25d0158bdd0e528192a2d46e92837860c525a72cc1347425080bfeb7ffa45e9fe771b6d707d843ff572ec9067506677c509406d573232dab985cddfb19fa42148e57d5a01876b57a4c3a2b52c406308ec1b90d6321c80e1f834d946574bd42c426c20a8d9aeef01ba32b3bce1a35e2c5097831f141b3ba41185d137e53ca822d6de74b0a0c577ec07c1efda855e892fb348ee61e103e963b1b522ab83fe2f3dc8780ce27e611513627ed159a5176d3db22c53c4f9c321f10ec55fe97612c85c22b5777e1ba932cb9b1a67c06aac02839b40136b89cd03b8b7d77c4214213a7e2905aa92e75d722caaa45464c11bb8a17fbe927f806af450b3f1b14196b9aad959f90ccba1dd721005df46697a1b5ae4763f11b38b582034a3e9a5f6cb7f42704aa65c39bdf85602749222711e856832378144cb321716dc03a4a2fb03bc08a6849d0f52390caabd8b0522b50ececcc21e887e807b8f8592f696108ac284ea2677f9aab4e21caf304b726f83819b00a899bd449aae04dd4a0fdb91492b8ec89de54becea069a27fa27c1601ded7ead9cbae0efc4bd2fb02e9c8a6f3f40b03c73ee327199123373bae6866b715426acaacc12306abe35ee34ae1db0d26be8fcab7eb35bad5ea5107ab06716ff24a7ec41c7e3fea454efb8d2da9894a5b87facbd3715bbb737a02238447a3297106da0bcf9c97cded8847735f65844ed64ffa4a4270f604e22b1eb610062d0294c883b73899da5f0e30a5d7692523ed2c78b779be441e18680454d5c0b6c60a51346a69bbf7a2f95879e0b75e94df5a662caf0ec2003121c89fefe6143a98844be9ef29d447bb92951a68f38e5dbb4485eb0897f1f1fe13c5160a7aecd23ed09b2fa1af688c26c76d8295f0fb10b5def7dd774ff1fa52ac5182234d2ccfc7c08a982069da735a9442c4964d18ff59111bd919fe682383af14c188754f23f3f8b7fa3c9188f7f18b3a5a3257befbfdcb2cd3852ff06ecbb1a19ad37986751da9285ca055d4301d26fc88a4921f0819efc2bdccab3204c94af79cccbc094ca731a0431af5ff62587accb1113d3ed7725b6854fab6924f6abfb4fed97e9a4d7b1fa04c22d66d07ac46a0154a2fa36504c463c14d45e38f10bc1aa15c5f8810a12998eda1f12ec07bd6b4383fdf53387be84c64db4df915a0d16f309caa61a3db2c6b22b7c60aac282a2777e4fa262f4fb2f0e59684c8641475af6d3b685082c453e53a9950fbe20d37c9481955b88731ab888f57a559cd50c1a6f2e3bd391e37c6c64e619bc8064705cdc2f0e48777ff77fc4a2389b3aa687e240d6f6ffe6a2aaafe08a53be7f00b8a670d1bb8dfb02b9f21069da31023a340ad044d360ee5f435e4dcdd0ecac4b87592ee6e7477408ab06115e67fa992ffbd909e08470f350af8c6ac9798594001141df29fb684af3f9c3da30b58d9277bea9e03ecbfa6a58e879ed31ea678b65615a212e12460755ba2de2f16dac1a3c28130f21cf63514d4f70fe1866ac32379560a152e8a09125bfcb192b875638a7cee51b65cc427f661ecef2670abe991e38e5ab7a3fc10e6f1b17b666cf93700b00a55462ef4015432e47a739dcf1ea3c422a65544a58d7370f0cb9cb3589519fb753b1d1dda0b7f9182dff3f8129cfcc7a83b87aa415218789ef3765c239cf9270fa4bca9041f20fb4a60eb73f7d16e3dfd988c00fdcdbaafaf95069f962ce603d1a17188078a1e81c6cfc3b6053037eb10c343f54947c3c3ec135c2ccf091c710af8b63b9b443e001448827fc0f30326418227ec2046694726d1dfab00bbddf016d6a667eed977a8f6977a359350cbb2b544d05babbba371ba5a23020f154367f7b0768b68997e1e83ff7e85ea0bdecabe0ad4853cff4e0397b5db8db86f8d6d70f3d7d137d6b144fb40cb88b7d7bb04489f62f49a9b9a52ca40eadd02fa5350978d34363e498c0692fd9e3cda01e34651209f75d15a051895a5c8b9805e2f5fdfc403b5cdb52e9d08dd6c8ee21810efafae7afd71128768dee7bb40f2283dce36d9d8310ce52d45e4c0aa3d67d0c4244e8689b7cf346ed3eb2ff76f3c5ce5e4ed6bd4f45180910d94ea2e579b793a1dcd19bac7418ebbc90956266810d380f99203a6002e677e898a3b74f8f4d550223ecde89ac31243b6fc5e6b0b326b5b814b4ef196ea8b7113452e761b93f1c7685824f15e479f0516cafd351d46b7f40b5fba92076990b0d856973832cdd4ceb9fae51eeb02a9242e8098e6fe2e7d0a9c5a5d121c95720947c9434d73e6f970a28a63928d56e7154d819f4b2461df52a5a24c8c229a402921f19e5f9055b95169f3a96f5896b4a42fe4c11478fe7dc36577443c96aae62ffd27772b327da4d88569f5f28dbfdf102a4e9a96e1f16c94ff40660a3f24677473570457672a830bcb28ee7dd442f2d6dec04b2da4746781ce7a94b47eb92366524e5ecdc68ddf21088b42af7981c4f082d9319e87ecb474af58ea3794d2c01f3ea9fc4e39050c9a283419ade85347e01c7d00979794eefc5fc7fb76edbae40d8e16e8d263dda0a8591ad74fee64a53b21a94cce0d4879f59809caadf9e96520cce68db33b4d7da204cea2afdb4e2d539cebb3c3073bea45d8b1b021b92f41aa38760317a6f132a44b1e81493362feb93018a9ef4d2fc4e9877930ca8166cd900ce5fbd4df752d9108ea72a737de3db1e47c14a06ea6992148196935d7f215d2272f6346ff84dc48826f4cc97995f9e9c6b20304e3a10b11497841c72a6370230c6b1a224eb9ad70dc9ea35aa5dabeb93eb441e25a627dd4a3585c24bb1ecff968dc5e8707a558aed2ee1a0986d8bf3cfcf816184e25bd3e00cc8ff87d2faf62f96046c0809ffda4245ed3e7a8a65929fd25653d416142dbd1020d4bb9cd808cc5dd283eff6858134ae651b3452229b7f8be0e580fbfc28595c4eecca06ff6b3cf0bd8a369878296c2b2c391ee87a42f2a220cf6c30ece76350774a3de43ccb7ddd760abb8dd8c0c84a59a4be5cb73f7a797e20f4a114db4ef9a0f1834bfd312ff5e8fc4823ef62c41ac6a8f11206ce45a091a191b976938f1c37c7910c78f16077bb5476e4375521b", 0x1000, 0x1, 0x0, 0x3, r0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffe1, r0, &(0x7f0000001440)="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", 0x1000, 0x7fffffff, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x10000, r0, &(0x7f0000000140)="2f85e7b228d6ed7c828d135851cced4a9aca5c702eb622acfde220d577b6eccce7e7c3b1c0720d475993071d6b01d1c2bb001bd0374c2055d27c0983e367a49b44ab97ef97929b654121dbf19961c3350812706cce7ce167a85640ee2f6aaabb38e350fe5636b56627aa15a7ead7ec79b20692b7dcf22f4e87ba06c7fca3d39ea3db5452ffbaf53dc6d10e34c30038205eb1ec3a42a13e99e3598882b5eccbdf41e84fffdc60c022adf6", 0xaa, 0x7, 0x0, 0x0, r0}]) write$P9_RLERROR(r0, &(0x7f0000000000)={0x9, 0x7, 0x1}, 0x9) r2 = getpid() r3 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000200)) accept(r3, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2}) 14:21:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5460, 0x0) 14:21:53 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:53 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000136, 0x0) 14:21:53 executing program 4: r0 = semget$private(0x0, 0x0, 0x400) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000000140)=0x6) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x2000) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000240)={r2, &(0x7f0000000000)="17cb4d29eb9f271423a8874b49a27a4e58c69fd63299be8eba7deceddd25c0dd77f30c08612067e195793159d82e4dbb90a3c1744d97df26e56d5937c7bd248ac01014f8a70f1ce8ba17e1ef8b33e176f0275ebe20122c6030ebe76056406a3c7f2c7bd7f638ab3e8c8cf9e87522de6a5a489894014362d56a8c01ec267c425f9bbc4996e416c6e163bd373fdb90da5397bd381b3245fe24908bd422e38b7792bb77af9d4058694606f90bdcefc5dced40dbf5212b29a7e5f25f1a9ef028af4d0f486b8467379187bcb10f425f3dabe0808e8157c125d02bd383e8b0b5ed37e38d95496fb7c35dca"}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x1}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r3, 0x3f}, &(0x7f0000000340)=0x8) 14:21:53 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) 14:21:53 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x3, &(0x7f0000000200)) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x40000) bind$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) [ 404.521953] binder: 23169:23172 BC_ACQUIRE_DONE u0000000000000000 no match [ 404.541646] binder: 23169:23172 BC_FREE_BUFFER u0000000000000000 no match 14:21:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x2, 0x0) 14:21:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 404.599246] binder: 23169:23172 BC_ACQUIRE_DONE u0000000000000000 no match [ 404.626757] binder: 23169:23172 BC_FREE_BUFFER u0000000000000000 no match 14:21:53 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000295, 0x0) 14:21:53 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0xffffffffffffffcf) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socketpair(0xa, 0x3, 0x1f, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB]) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)=0x2) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2}) 14:21:53 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) pipe2(&(0x7f0000000000), 0x800) 14:21:53 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000258, 0x0) [ 404.835111] binder: 23213:23216 BC_ACQUIRE_DONE u0000000000000000 no match [ 404.889744] binder: 23213:23216 BC_FREE_BUFFER u0000000000000000 no match [ 404.952429] binder: 23213:23216 BC_FREE_BUFFER u0000000000000000 no match 14:21:53 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r1 = getpid() r2 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) accept(r2, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5421, 0x0) 14:21:53 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mq_notify(r0, &(0x7f0000000240)={0x0, 0x32, 0x6, @thr={&(0x7f0000000040)="2d8678ff20d1996b4866d8b9454e9d4c13527b53224767c47e30585530a39ae4db4f437984d73f5e2a2772a5f0965c10abc26357ef3b2c350756071c2dc1624e690eac4b40563b186f11bc3f97a5c8dd695fd1aab4214f4d6eedab04f7ff1b6801fc82982ae08d621532362114da37a883e3256fc5a7f93fc165370752cdece353efcaa055edab6eb8309b09142a19ae654d90b2fd614980bc99a71c7406d0", &(0x7f0000000180)="3ba798949c66c95c4c1a95dbe4a35ae819a2134ded4971da75f8a787efdc9df981693b53aa82911b74b60ae632070df289c6ea39bcb4608ffe0774be9b5d38544c9d6af1f7e3608798"}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x7, &(0x7f0000000200)=0x719) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r1}, 0x10) 14:21:53 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x10000000000001c2, 0x0) 14:21:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2}) 14:21:53 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x472, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="000000010000f580a54b0000070000645a"], 0x0, 0x0, &(0x7f0000000380)="bec465b71f15971eeb8b37cc469581a42a4e35be059c35b2ac7a2668b389daf1520835194b66bbc03e0b1629a423bce2e88a8cdb87fda85b508d9172e74744bbe1868a7f4eff2b31eac4382f1fdd8dfe9934ecb47bbefe935e94a9f082381e284fa3053c0cfd8d59b2d44126f5be3005582ce951078d3f6b82b3c1538f706b77017f003f8ffccf8d03e6d0dc9c57f6fc228afa99f9d5e404c786f6"}) r1 = dup3(r0, r0, 0x80000) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) 14:21:53 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:21:53 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000080)={0x9, 0xb6, 0x1}) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) [ 405.097141] binder: 23246:23251 unknown command 19365 14:21:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4b47, 0x0) 14:21:54 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x10000000000001bd, 0x0) [ 405.132565] binder: 23246:23251 ioctl c0306201 200000c0 returned -22 14:21:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:54 executing program 0 (fault-call:8 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:54 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x8100, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r2, 0x4}, &(0x7f0000000180)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="f3f325039889844e6899201d97990b4e952888a7aa7a0008000000000000000000", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc020660b, 0x0) 14:21:54 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000029, 0x0) [ 405.354685] binder: 23284:23287 unknown command 488675688 [ 405.363524] binder: 23284:23287 ioctl c0306201 20000100 returned -22 [ 405.422032] FAULT_INJECTION: forcing a failure. [ 405.422032] name failslab, interval 1, probability 0, space 0, times 0 [ 405.433571] CPU: 0 PID: 23286 Comm: syz-executor0 Not tainted 4.19.0-rc2+ #3 [ 405.440775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.450135] Call Trace: [ 405.452745] dump_stack+0x1c9/0x2b4 [ 405.456398] ? dump_stack_print_info.cold.2+0x52/0x52 [ 405.461620] should_fail.cold.4+0xa/0x11 [ 405.465720] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 405.470854] ? check_noncircular+0x20/0x20 [ 405.475106] ? graph_lock+0x170/0x170 [ 405.478926] ? graph_lock+0x170/0x170 [ 405.482751] ? find_held_lock+0x36/0x1c0 [ 405.486842] ? __lock_is_held+0xb5/0x140 [ 405.490943] ? check_same_owner+0x340/0x340 [ 405.495281] ? lock_downgrade+0x8f0/0x8f0 [ 405.499452] ? rcu_note_context_switch+0x680/0x680 [ 405.504665] ? lock_release+0x9f0/0x9f0 [ 405.508693] __should_failslab+0x124/0x180 [ 405.512953] should_failslab+0x9/0x14 [ 405.516768] __kmalloc_track_caller+0x2ae/0x720 [ 405.521466] ? msr_io+0x11c/0x380 [ 405.524946] memdup_user+0x2c/0xa0 [ 405.528504] msr_io+0x11c/0x380 [ 405.531804] ? lock_release+0x9f0/0x9f0 [ 405.535800] ? do_get_msr+0x1e0/0x1e0 [ 405.539618] ? copy_overflow+0x30/0x30 [ 405.543551] kvm_arch_vcpu_ioctl+0x95f/0x3ac0 [ 405.546227] binder: 23284:23297 unknown command 488675688 [ 405.548061] ? kvm_arch_vcpu_ioctl+0x90d/0x3ac0 [ 405.548088] ? __lock_acquire+0x7fc/0x5020 [ 405.548116] ? kvm_arch_vcpu_put+0x420/0x420 [ 405.548131] ? print_usage_bug+0xc0/0xc0 [ 405.548153] ? mark_held_locks+0x160/0x160 [ 405.573383] binder: 23284:23297 ioctl c0306201 20000100 returned -22 [ 405.575264] ? print_usage_bug+0xc0/0xc0 [ 405.575281] ? print_usage_bug+0xc0/0xc0 [ 405.575294] ? mark_held_locks+0x160/0x160 [ 405.575308] ? print_usage_bug+0xc0/0xc0 [ 405.575322] ? print_usage_bug+0xc0/0xc0 [ 405.575337] ? __wake_up_common_lock+0x1d0/0x330 [ 405.575355] ? __lock_acquire+0x7fc/0x5020 [ 405.611273] ? mark_held_locks+0x160/0x160 [ 405.615530] ? mark_held_locks+0x160/0x160 [ 405.619775] ? print_usage_bug+0xc0/0xc0 [ 405.623851] ? kasan_check_read+0x11/0x20 [ 405.628005] ? rcu_is_watching+0x8c/0x150 [ 405.632165] ? print_usage_bug+0xc0/0xc0 [ 405.636243] ? lock_acquire+0x1e4/0x4f0 [ 405.640228] ? kvm_vcpu_ioctl+0x1ea/0x1280 [ 405.644475] ? lock_release+0x9f0/0x9f0 [ 405.648463] ? check_same_owner+0x340/0x340 [ 405.652800] ? rcu_note_context_switch+0x680/0x680 [ 405.657751] ? kasan_check_write+0x14/0x20 [ 405.661995] ? __mutex_lock+0x6d0/0x1700 [ 405.666075] ? kvm_vcpu_ioctl+0x1ea/0x1280 [ 405.670329] ? mutex_trylock+0x2b0/0x2b0 [ 405.674412] ? __lock_acquire+0x7fc/0x5020 [ 405.678663] ? lock_downgrade+0x8f0/0x8f0 [ 405.682847] ? print_usage_bug+0xc0/0xc0 [ 405.686916] ? __lock_acquire+0x7fc/0x5020 [ 405.691159] ? dput.part.26+0x276/0x7a0 [ 405.695143] ? graph_lock+0x170/0x170 [ 405.698954] ? graph_lock+0x170/0x170 [ 405.702775] ? find_held_lock+0x36/0x1c0 [ 405.706851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 405.712462] ? _parse_integer+0x13b/0x190 [ 405.716626] ? graph_lock+0x170/0x170 [ 405.720462] kvm_vcpu_ioctl+0x286/0x1280 [ 405.724540] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 405.730265] ? find_held_lock+0x36/0x1c0 [ 405.734346] ? lock_downgrade+0x8f0/0x8f0 [ 405.738522] ? kasan_check_read+0x11/0x20 [ 405.742696] ? rcu_is_watching+0x8c/0x150 [ 405.746942] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 405.751635] ? __fget+0x4d5/0x740 [ 405.755118] ? ksys_dup3+0x690/0x690 [ 405.758841] ? find_held_lock+0x36/0x1c0 [ 405.762915] ? kasan_check_write+0x14/0x20 [ 405.767158] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 405.772129] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 405.777850] do_vfs_ioctl+0x1de/0x1720 [ 405.781749] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 405.786952] ? ioctl_preallocate+0x300/0x300 [ 405.791374] ? selinux_capable+0x40/0x40 [ 405.795447] ? __sb_end_write+0xac/0xe0 [ 405.799436] ? fput+0x130/0x1a0 [ 405.802747] ? do_syscall_64+0x9a/0x820 [ 405.806757] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 405.812304] ? security_file_ioctl+0x94/0xc0 [ 405.816724] ksys_ioctl+0xa9/0xd0 [ 405.820192] __x64_sys_ioctl+0x73/0xb0 [ 405.824100] do_syscall_64+0x1b9/0x820 [ 405.827994] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 405.833368] ? syscall_return_slowpath+0x5e0/0x5e0 [ 405.838307] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 405.843162] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 405.848188] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 405.853219] ? prepare_exit_to_usermode+0x291/0x3b0 [ 405.858249] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 405.863890] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 405.869084] RIP: 0033:0x457099 [ 405.872286] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 405.891197] RSP: 002b:00007f7873fbbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.898920] RAX: ffffffffffffffda RBX: 00007f7873fbc6d4 RCX: 0000000000457099 [ 405.906193] RDX: 00000000200001c0 RSI: 000000004008ae89 RDI: 0000000000000007 [ 405.913471] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 14:21:54 executing program 3: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ptrace$getsig(0x4202, r0, 0x8, &(0x7f0000000040)) clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() r2 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) accept(r2, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) 14:21:54 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0, &(0x7f0000000040)="ed4cc49f12dd609310a7834000e0e03d3a5a25c2e564cae8e9fbc79e0981ece4d737053f9670d48a93e5e3428a040784a8"}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$RTC_UIE_OFF(r2, 0x7004) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x410000, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0x100002, &(0x7f0000000080), 0x8, r3, 0x6}) 14:21:54 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) sched_setparam(r0, &(0x7f0000000000)=0x3) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:21:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5450, 0x0) 14:21:54 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000257, 0x0) [ 405.920746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 405.928017] R13: 00000000004cf358 R14: 00000000004c5622 R15: 0000000000000000 14:21:54 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0xf7, 0x0, &(0x7f00000002c0)}) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x2000) 14:21:54 executing program 0 (fault-call:8 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 406.058986] binder: 23310:23315 BC_FREE_BUFFER u0000000000000000 no match 14:21:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40049409, 0x0) 14:21:55 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x10000000000000d5, 0x0) 14:21:55 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:55 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 406.410541] binder: 23347:23349 BC_FREE_BUFFER u0000000000000000 no match 14:21:55 executing program 3: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) write$nbd(r2, &(0x7f0000000140)={0x67446698, 0x1, 0x1, 0x3, 0x1, "b5eac8291ee36976ab3b4f9a0f5367e6a93b007328db5c397b2f0b434a3a9e1f84d3c62f6978c51f50b4"}, 0x3a) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) accept(r1, &(0x7f00000002c0)=@nl=@unspec, &(0x7f0000000180)=0x80) 14:21:55 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000249, 0x0) 14:21:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x0, 0x0, [0x48f]}) 14:21:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0189436, 0x0) 14:21:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4004ae8b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:55 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000900)=0xe8) sendmsg$can_bcm(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x1d, r2}, 0x10, &(0x7f0000000a00)={&(0x7f0000000980)={0x6, 0xa3, 0x80000001, {}, {}, {0x0, 0x0, 0x100, 0x1f}, 0x1, @can={{0x1, 0x4, 0x8001}, 0x5, 0x2, 0x0, 0x0, "53dea30c7dbb05b5"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000200)={{0x2, 0x4e22, @rand_addr=0x9560}, {0x1, @broadcast}, 0x0, {0x2, 0x4e22, @multicast1}, 'gretap0\x00'}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) write$selinux_access(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="73797374656d5f753a6f62566563745f723a80726f6e645f7661725f6ed5f8361f30202f7362696e30303030303030303030303030303700000000000000000000000000000000"], 0x47) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:55 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) 14:21:55 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() r2 = request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)='/dev/vcs\x00', 0xfffffffffffffffe) keyctl$describe(0x6, r2, &(0x7f0000000240)=""/76, 0x4c) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x464080, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000300)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:55 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x10000000000002ed, 0x0) [ 406.647095] binder: 23370:23378 BC_FREE_BUFFER u0000000000000000 no match 14:21:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4b49, 0x0) 14:21:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x0, 0x0, [0x48f]}) [ 406.714903] binder: 23370:23389 BC_FREE_BUFFER u0000000000000000 no match 14:21:55 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ustat(0x10000, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x74d8, 0x6, 0x100000001, 0x100, 0x1}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={r1, 0x1ff, 0x10, 0x1, 0xe304}, &(0x7f0000000180)=0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:55 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x10000000000001f3, 0x0) 14:21:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x0, 0x0, [0x48f]}) 14:21:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4020940d, 0x0) [ 406.901980] binder: 23405:23408 BC_FREE_BUFFER u0000000000000000 no match 14:21:55 executing program 3 (fault-call:2 fault-nth:0): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:55 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x10000000000001b2, 0x0) 14:21:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x80087601, 0x0) 14:21:55 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="100000000000000003630840", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) r1 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x2010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x3}, @acquire_done={0x40106309, r1, 0x1}, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x1, 0x1}], 0xb5, 0x0, &(0x7f0000000200)="3dc958fbe50b0b320027856c61af7657d6064eb66e6c6c39b7c5cf548c9c7f16bcde5e6e5a4f0ddb03958c8289f7f3169e1b87b2d0ac427918304dbae96c53f31fd03bcec80439f3df4ad971a55b8af137aca19dad8548bc4cb1fe4febb7ace5ddfe80c03ebbd6fd9cf117bd20185cc54d6b84094e57c7d123ed6790d1e4f01531466f4cd949fe61e6dd1d787c04193555ade22f73442a0131f64615c1ff41d52d9a5b7321bbca2d79564fa5679291610055568641"}) 14:21:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2}) 14:21:55 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x916, 0x4000) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) r2 = getpgrp(0xffffffffffffffff) wait4(r2, &(0x7f00000000c0), 0xa, &(0x7f0000000240)) 14:21:55 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) openat$cgroup_subtree(r1, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) 14:21:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4040aea0, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 407.210388] binder: 23436:23441 Acquire 1 refcount change on invalid ref 3 ret -22 [ 407.218264] binder: 23436:23441 Release 1 refcount change on invalid ref 1 ret -22 [ 407.276034] FAULT_INJECTION: forcing a failure. [ 407.276034] name failslab, interval 1, probability 0, space 0, times 0 [ 407.287372] CPU: 1 PID: 23448 Comm: syz-executor3 Not tainted 4.19.0-rc2+ #3 [ 407.287382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.287388] Call Trace: [ 407.287412] dump_stack+0x1c9/0x2b4 [ 407.287440] ? dump_stack_print_info.cold.2+0x52/0x52 [ 407.287458] ? find_held_lock+0x36/0x1c0 [ 407.287481] should_fail.cold.4+0xa/0x11 14:21:56 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xffffffff, 0x80004) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={@dev={0xfe, 0x80, [], 0x11}, @loopback, @ipv4={[], [], @multicast2}, 0x3, 0x4, 0xfffffffffffffffd, 0x500, 0x3, 0x50084, r2}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}]}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000340)={0x10000, 0x200, 0x10001, 0x3f, r3}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) set_mempolicy(0x8003, &(0x7f0000000000)=0x1, 0x6) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) [ 407.287500] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 407.287521] ? find_held_lock+0x36/0x1c0 [ 407.287548] ? find_held_lock+0x36/0x1c0 [ 407.287586] ? check_same_owner+0x340/0x340 [ 407.287608] ? rcu_note_context_switch+0x680/0x680 [ 407.287632] __should_failslab+0x124/0x180 [ 407.287662] should_failslab+0x9/0x14 [ 407.287678] kmem_cache_alloc+0x29c/0x710 [ 407.287705] getname_flags+0xd0/0x5a0 [ 407.287725] do_mkdirat+0xc5/0x310 [ 407.287745] ? __ia32_sys_mknod+0xb0/0xb0 [ 407.287765] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 14:21:56 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x2) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000900)={0xffffffff}) fcntl$setown(r2, 0x8, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000440)={{{@in=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xe8) clone(0x0, &(0x7f0000000680)="df037ba727f784726371a1bd315aaf3da350e4a4ba3ffd374d180c225a6485aee31aa0551e92bb9064e1d487a0d641badca11abf4c6ee7132ffabe2a1436b81262779d7d86768276d2e2e7a3909007edcc89d6ca7b7c68e65592929c588450667a3bdcd9752f2c515ff81f6f1b47c35e3f4fa68f191a4abd5f554fdb6c2502787caa2d51279a937076aae1ca9bce154b183a29f0e4170c7813b38642e512615178ada2a87506bb80389ac0c5015caa244dbb7b7d08190a1aec29f6c1bea131eef66570a38798b31f914ac8874dac94eeddc4725eb33df08b6e28eb66a69abe4bde441836155dbc9a71103272f53bd2f4cd74611c", &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)="f7db8ee1a590b6eb3aab29ac8b21406c9789e0cbf06843bed63673bd1426e4f9875ca8699fa775fb078f58203fdeef6d8420b6075a6ff64e65f133021e0267ab42c74e01fd23846e566af94b48c7c8c96037d5c312335b0570d7242cba15da4fb08581833d15a4c57e7be1feed726edadc3dba7283325cf2cb53f64385710c7fc6515bcb4705d90e8f4d9e79668b216497b5e588b7934b9e0cab2f308c1add16aed855161017f4b0355fd574b278dd51c2bf46f48aaf3c9940804e95c685d4626d5be2def9b2d48c37d6c03d33937c273c91143f8ebf336f98ca24d22d") ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000980)={0x0, 0x0, 0xa, 0x0, [], [{0xfffffffffffff259, 0x0, 0x0, 0x4, 0x0, 0x10001}, {0x7, 0x7, 0x1f, 0x1167, 0x7, 0x200}], [[], [], [], [], [], [], [], [], [], []]}) write$FUSE_ATTR(r2, &(0x7f0000000600)={0x78, 0x0, 0x8, {0x40, 0x1, 0x0, {0x4, 0x4, 0x9, 0x71579a28, 0x3, 0x4, 0x100000000, 0x8, 0x5, 0xfffffffffffffff8, 0x8, r3, 0x0, 0x40, 0xef4}}}, 0x78) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000580)={0x5, 0x10, 0xfa00, {&(0x7f0000000cc0), r4, 0x2}}, 0x18) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) sched_setattr(r1, &(0x7f0000000540)={0x30, 0x0, 0x0, 0x10000, 0x4, 0x200, 0x345, 0x7ff}, 0x0) [ 407.287784] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 407.287809] __x64_sys_mkdirat+0x76/0xb0 [ 407.287831] do_syscall_64+0x1b9/0x820 [ 407.388384] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 407.388407] ? syscall_return_slowpath+0x5e0/0x5e0 [ 407.398706] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 407.403738] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 407.408769] ? recalc_sigpending_tsk+0x180/0x180 [ 407.413537] ? kasan_check_write+0x14/0x20 [ 407.417797] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 407.422668] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 407.427868] RIP: 0033:0x457099 [ 407.431071] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 407.449986] RSP: 002b:00007efe0dd87c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 407.457717] RAX: ffffffffffffffda RBX: 00007efe0dd886d4 RCX: 0000000000457099 [ 407.465000] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 14:21:56 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40087602, 0x0) 14:21:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2}) [ 407.472285] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 407.479567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 407.486849] R13: 00000000004d3090 R14: 00000000004c8107 R15: 0000000000000000 14:21:56 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x100000000000001a, 0x0) 14:21:56 executing program 3 (fault-call:2 fault-nth:1): syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 407.575708] binder: 23436:23441 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 14:21:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4090ae82, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:56 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x100000000000011e, 0x0) 14:21:56 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002bc0)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x5aa) r2 = socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r2, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="263493254fe6159b728b627c6c4f035b5f1c1f182aab8ed1062ee3bd42fe2406913308406f840ecd1581b0b9a856dea413429cc2903de0960f137b5d17d2c3fac6ed36450dd87efd2f8f2ee78c1ed1b0d2f254e448d6d4f7981b85f8029bfe08494df66f3f4c2e4f83d2848df99548bdf2efbca43a2733ec77b5684351e704c01372c8c92ec2e8e56f1db2f5fc5e5ed8e39564374b907fd5fe1386d596776f814b998dfc9958597941765d9f3aa66266e0bfe81af519396b49805f319b9418001d42d765b51c90c17da7632f3bd62e4648fa588ca2", 0xd5}, {&(0x7f0000000180)="2c574d2a81b3c1e63bf777b3f79b08dedfa384c053ab455d2ecd842271c4c3515179b007312cf3deff61048bfdd6f588c630feb8c7334a6c61e47587a7ace2", 0x3f}], 0x2, &(0x7f0000004600)=ANY=[@ANYBLOB="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"], 0x1360, 0x10}, 0x6}, {{&(0x7f00000015c0)=@in6={0xa, 0x4e20, 0x1ff, @local}, 0x80, &(0x7f0000002940)=[{&(0x7f0000001640)="10f5c8708165b1fe251606edf4f037", 0xf}, {&(0x7f0000001680)="a8e4c40c697e3cf1387ddd24632ed0dd10d396e197b0e05098dcd44f621c82ecabac6eb9efaaefff1883436d59e062cba50128a6ea13d9204ec3ab74044d69abd610fa7571a580b304706522a13095952bde", 0x52}, {&(0x7f0000001700)="228beb27ea1080dd441475919af5cb3eac9b040eef2d207929d7c876c9b38c990fa719a7a25e67f32fcb9891ac3544ef08e2041b7d1d26a7ebb346098e58775c00184523839b09bf7b625a3390c5269836d929153cc2ca5d8bbebee305fa8a3b52b1b641d681de1f5c5faebd76c3db01339361cf0c5541cec812306a76022e1caff22a32ae5d6bdfc0e6df0c9246e32fb2ed18dc29228f457fc2e259fd4d2fc056b97d2ba37696e3c0cec12fe04353919d0696542f1be30f7741748b3a5a035dd3139a15db4329d9a007ec335fea3e86f00f8eacd805f0c9a4d6", 0xda}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000002800)="2d089dfb7fa674191ec1ec258851da50eb1285973b5712808c6da157c112d03a8b65ee6c557dad9ab162b8581cfe977f275500a3ded1c6a02e6aa6e37d283860aed0d1683bc6278763a5eddc3361e0927ed4d8ddc205ec01abcdc67ec457048f5b7516ded72e2ad9bad30b43c5a806427e7bb885b2f7bafdbd8b8483ea7217ff667f6456e4c1d1be7e329759959de782ca7e5eae3c51b1da549dc84cc2dd82503f07ff4a57ee10b295ef0b8d449b4418cc", 0xb1}, {&(0x7f00000028c0)="bd4d261e8887d953ea604b05b61074c5fb145374107cd9e72c4312ad8ace7718bb4d157de8dd2732bd260852bd0df073f4cf8880800b7d04c0e4d631448cebaf6df1fbb7e841dab68d199ab7c7a5a3ee703402fb999b0535c2d62c69f1cbe262c41ace5a77f80f3c2efdd33f8cd0ae57c623f7b795433c86415ed6483524b5", 0x7f}], 0x6, 0x0, 0x0, 0x4044011}, 0x100}, {{&(0x7f00000029c0)=@in6={0xa, 0xcee, 0x0, @ipv4={[], [], @local}, 0x2000000000000000}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000002a40)="8d4b2a7c9b846595935eafaee12f77b9900420dcfc91b6a78b012a64462385c497eb90530065dfa31e37491c5a23a92d79d4174c043d7ae6136f98fa2722ac8fd3909f1df5439113251bcf4c573166b64c0c3c4b2ffbe8c0f4ac99bcf7208dd0df6761aec7bcfeada4008464657e409d85128693ab036c0bc8ea17bede3932a8159ef3d7058907026c1f1fc3c08a2ec841253c838ca7d0d7ac6ca4e12e14622aae8829117695493183fa5b05aeb2ae433fa22682cd4b56ad1907c1f56ec2db53b9ea8bfc6794262118ff7ca9da9695d247f1ade51599b5a77eba569f769b60f947917881a5930d47dff38ae1472a1f86937f56e8e146fe045d9811bf", 0xfc}, {&(0x7f0000002b40)="8018a0efe647dc375f663c3e5bc3db9133534e5dfab727ea5302e8db5c4893923012ad02b85b23e7b74b6ad2f104748d2ca81513c9b3af36b00b59fe71a4bdc8970aad36f8df831252c4d57484fbd2f0730d97e8a3ad51b8a8f2fc49fa26110572fa11b4428eae77a046a6a354b9b4ac1254c9da78ad2e3c630489", 0x7b}, {&(0x7f0000002bc0)}, {&(0x7f0000002c00)="f61bb06d157681cbba043cc99832d6faf4d77c75284590064dc40d2f7556793a5585c0819c59218a576ab9caffb79b3b7d99e974172da5bdf67e0eae7abe2e872b6ce53830571acdc5d555d67257a003857710944f25a217950dce05295ba212d707d584175a26a056ebac51565fdd3aafd5ab12396d38b13550278ddde1c525bc56558351d311e06722b3e01935328bbc469dc225d4ade6b62c5f3513581fcdb995ad3443ec4c9f1d8fc8182627a1adf7d26727e1804d92e1c3325a3a1e9b124029442cbe1a114f1b56fd192b38b0e03516a4261db95112", 0xd8}, {&(0x7f0000002d00)="c4a88dcf7dbe3814832812e74c06a1aa2b299ecb96761aed", 0x18}, {&(0x7f0000002d40)="5602a1710be9773f7943fde41cdade8cd15a9a4ea61c79cd112aac0e67b4aa905c953a52ff63ec45c2aa8b94f571b9ba59b5211c116561dc0cc54692d1f07d841a1536f026b1eb8d877aa3df47b13115db4abe7be3732dbb5cb49ab2ff913b9d63e2b8dd933410a5ffb5a1784e161d56270f36b5d08e8f5823e337148b622be732d20dfbccda66b88a8bc3d8e621a8829fbcab9156d53f8b2505c7e2d822cfa8802be8281721a2f588ec75474305574cf5c5e533d539cca82b66be667ac3cef993ca5a742f3fb48620e83f6f530dbaefc82d866ba57a845aa52e9297122672bc1e6fe72d15bb53a6b8c88024fcec035519b84e7769db9f3ac023cc1c32cbab1265e935e2fef2bfbbcede4379d249d4bbfca16d7362105e056b215811aed08a143dddb498c04ad941641bd7e2064738bde2216bafd7fb36dcb8d0417338a2c372624bb26b173776664f07d7fbd55f9ef42560bbda45e066979fdb437d58f5e06d78dfd480d20756dd9353cf4a1f1507bd681de7f5a72c66e7a0f48d1dee775bad5d74d344e446e408927869f89628bc4c72893dc7c5cc9101f40824ad4dfe4e4e40963aba40d0936e135071ad1b097ae97645003efe8a7843f80e6385db922af9638bd2b339ff956ebb026e94eb911ef49ae9b506c6859f91c1cfbeeb828c7bf3a1fe7eadf9825b497f6185e71b63f9849d85919a0d2ef08631750f1de621c0b03bd0e5aead7c33bf0779b87a5076b7f7b28379fefb241a6069c5b0aba0b4c9224edd659fce9d2ef918ac4a9d3d6cea9b645933b2b2eb838a2299317c0923008acf1b2f83738088055a770856f760b4aabf69ec5d9641d542fcc621c4aca9a4f5f7c7d1c7c4bd1fdfda9dc060583781b1c8132d7a9d4bd468073f6137ffcaa56453a26fe759937129912b88828fa732b4637f91e5a94623f1ced90b3ae913acd662a97a6379b059197b98e76c5f7e132a98ff111e2d6d8bf022ae03703f57a6ddcc2e2393720e2f78f99a87b29cf8e952089940a342c858b852f317f9f6167950c7a7e582e12c3e291d85a7a50d2a0f1aaf4d8fd483380e804e46445d0aea0c79af85ada9bcb0237972a6bc52223e6eb6762004bbe879255e26c6e0323d1e6f4ac20cf7a83eafab3a49a93503b95ba49150d4490a1952f7d328aa445cc3b029080a4b87496d06913c52a2be2e690c7819421d92985f13ba482827943b21a3731a94f54cea5056fda3203f40f40d8165a197643a33d722c38a0032ae6e30e24cbf8f7cacedc5778d3983df22677e37878785be5246e290702af9d29fc125521a940016eaa91c1fac72f8a5d5e09a8808d2361e83bf44df48f8f5be163f613fec8c096d80e326844a1f43f2f8228547150efab424cabfd9f5d06c86b77529f7a646c7dcde25ea27d0eb31bcecad21b263ebda046faa4e732d33314233f5a35c794fb0ea07cfa417a721d1bff35f6785d382bfafc3ac3435f41c87d52c98e44d37d14149d43dba7de8e161945acbc45b1309347813be2edd416c0a0794b78f344f468fce82428d759c7634ad925fc0bd34c68e9ce694785e8cc3b162c0a5502abdb3ea28cb401593d2c1c2e0a1e5b1d89b259d0df3470f6ab66668d0eae0a9d7a4b47efc0409d1051cdb374bd0ebdb1a7eb018c32e5ed94801afd3b55c2c8a7ec157a3b442c6c66a95cba201289721d9fdd9feec7381eaf261a9381a6a828a3f7dff9907e5487d63bf2295b61e6f76e3f1b49f37e71d2ffaec525fa429f8ed2aab68b16a9b7d5e310287fcf508471d5bac0ac659c1876b0d189fc53cf7d5c1ce88c5945468e85ba88da8cc19af9274b786114fc209353c3007c9d0d43032b70d639fb1e34336bb64adedb60e88c991ce9f406b81ec160513353bd4788d51e13dacdbb019faf5ea6c075ef2b2ada1e29e4fff931ea2067b9bf5eabc790b9d49cc37e44c3b46a3459cd7fe6a6eb4e2e3bee033d4eee3b4b93bf2f887a213de0420235d3295b632f7bba500109ed3a33c4e68f589c8071e5bc8d944867ba7939c052389fb9f0d9c646b85545291e3c53802980474364da2d981b3bef2363c4a3a95f391ce4ad7c4d7e79581e8780f7804f0e01464d43bbc6a40eec05544254e52c2a280314b25ac94bd347032810ba73075b2312704b17d0dce5cfb599bb62d9937f0ac20b002dea6177f11449a1d915dcaa0bfe31814acc8a3a18267e25810d160438f7ecfa52fba874f4abbc9f7b57acc1c5e53d5ad030fb1341a736e84b1c13715671d49a6d63dd6fe66f7c026af04452986e020c4496818a038a125a750fe5bee00e99aee471d22bdc7aab0d872221d4ff79310e87ad839b85fd4970699301b8f217ca82b9e31a21c548de26ed83a172957d64553e4103827b007a45562d88c94f8c40b0a9493f73e0ef218da6751d0ccb125e23485fbf12e36b6123634f0f5b5822c40766335ac42769f941bed23d6ba919fc292e72f8e4efe52d359b94fa9a45f1068dd0cc2871b250c26300069d072bb4460aafef5966c07258ead9526f2cc55e66aca78e8a399fefc8233d8079711ef999332ecd108c1b82bae1da8d1daca3ac7c960911088c636388651cff4c215e2c766ecd52aa6daaeeee5c1e4df2635cec8ef530b341138300f7cb5a10d6d41dbc0dfd012e35675c3a3ee96e87e8d0abeda49081ff1f6c06c5250b71c08846d3dc3f3d02b7824ec8d9cdae3908086bd00dad746a3de86266e6d5c609767cf5cfba368bf30b167ddf0cc1a335016e6f3da71d13a3e5017971a63b5463801288b28176611862f89e2fb87fdb6243488b418ed6c857a21d2f099a46bf51af2d0288a710ff42f9e27a5ca19b3721f0d4634ed2755f489a2d58e5e9c25779608b89e2d27188639d59bcca1a0b3b9cc068c596e5b51fc0f6a7aeabf980954e697bff6408b340ca4f99b628c3539cd6e6dfb28e03971580ad3668aa9313b272198b2ef2e0e0385cbd1fe481c7b5dd5a4929743472eed1381925e170c30f98cf25992575dd27a6c60da900c92ccc6aa4ed9fe1a628cc2be772a6367ba5dc180f3b21f4ceed6eef5d0c39278284eaa60897c4b14ec0c69228ab2c76ea856938f5d5c9ce411d688da555413a09adcf10e22cf7c3679444a3ffd07afced5b1f3ca37953f6cd3fa351ba356f150383f0a054493ef2874c306ae2fa8ed508cac6070d842837f4828d5e65db4d932c431ab04253582f2a5329cad26d2ba7b32ac878bad37379e0a327a3904c1ca859602f2884f229cb0633932ac1a3013a9beba7b1b0a9cd23e7f5190d6f70099b1a0d1cf3d44dc4d422381019741503c1201205026f044288dc8a2cb5887982165dc7d8bf576cb3d12ff96ec0f4752ed235442ab5e3e74055288a7d8eb0817ff653c9bde8fb3e425e73ec79df35403748f0915ff9fb1e5eaedb4f5beae8f80eb1c93697b6952ce7c5913b7368005598ac9b1aea07a554b922edb53f93e4d318c765d8d18786f83926bac0029940f678c43b01692931c8f1158f759155c23537c7271c347db48c5a0fe471c02550c99175da288f6260dc9012cec6893312653947bec678ff0f05eff84591f6f78c5e4da489f2192436cf5927d950ef2cd5f8dafab484de0d7a2942b110fdc6db98a1b58e4e84b492a8978adc5c8c94bb8dca3130f31bc709f509351ea2bebd60af8caf032550bc7ea301505d7b33276313669f5062bb5937034377815b41e9754fa5c277f0202f422fd2e6a6b3a181d25e4e31e8fc308fc7765cbce74aed9a4e7558301befe46f0c52772db667372d341ecf06500c442e26d0cad0ecb27254ec982f60a944dcf909c0205bdaa68163c025204a1a7440f83440cec8fda5dc8667ad0ab4899a7571a0ad201dbef3d276c896ea0731e0f77c0e16c1baa73e4b9178c8686bb36d033443b8d67118ed43612d3199f123fab4de97fa359dded39558a1ee3eec23cd180f6ed4c8d43105ae1fac5ccd8857425912fb413e82c0bc2df4defd40e5b845d3b17186de100ff0b45f7110f7b6c9123f3518ebe79a12288ce787a60c9f49fbb912c49e1d3129a1300d234bed1fcb4630110ec20b207aa0a4fe09c03f1e527b3b24141a86cd583482f589b16c5e1bd82f48a44449adfcda46cc43756f88ddd493e24071437094dc53eb09ce8ee34a290ce8435a174b5fee8750a1492290267211569d2b2353ad76df37ed561a45be712d8c406683f17bd41542684543f27f6e9f06ec1b9123f178236b46e91d011853586e6cdeff7e91ab6db1ac18de22f7d330e1672c757095f69a368a60c71a24fa04c9c960909c025450bb6182ca369c3ed4cc73ecb3688b9403293d84f706520caeaf86671dff9f0108375092c591c368bb7254c4424402365d73b71435181cd48a5175fdd0ddf481c0e9a04ab26d80e191a1a5f57bfa68d8b1bff9ecef544e1064b811da8e1586cba83789818991a9cd6f5447ce2b22f9cb8fd1c3f2ab39c2d75948ae3d5d47de55fb5e8e3b76fa9ca08cc1f14bcf25fa897f025a1db6907be99bade749a652234399b48a867d8218aae58b8b44aa64c68315fa6407e882f2d1cb4869e0a2b4aeff50448793188235ee906fac135d2aa51d55f790b6873ceebffe667d38d8786edf1261d0af2938f10cc254b0d40ca5e5c8c8a1c07b1f3e3f4c0167c231fd5223084b76cea9c1706f01e30e89f9bc6b4283c820d081cce4aaed37091d42b5a11e582a6ad6484980a0c77e4f4ca674dce37177d0de4a9a0782bad4b989267ee9825dc7c64c1f7ff8852008de0a4c7ef9cb47e2ee2b4a4bd65845b029abeb835acdfe2163ae38c91321661fd38ceabebf1b24db44845709e0d402e05aa57650ebef27c06ecf14e8538fa698cacf8c5d6d3892a56c7f85e2400cdbd595bdd8d5d15e7770f6b866acf09c34fc603c048ad0036340cd0067a648d858bbe45d866525157b811fcaa3163b0e3e05ef52f0adfae921e4ea05e3e1346a653744b3f5b159f4fbe9997cf04f550182a23ed7b0a96d54b2ca1c206f926351fde505bed82f5c847d1979eaf30b45a040929e82f585aad9023028dce8ef8fe18c9e33651deb383f67d6207614844c5349e41324ae66a72931b37153f34951d3f935db2e3c251678512313f9ac7d91dab3ac3bd5fea704e01c8452370329a4e289e9d23eaae8814e2bf34470f570d8152d1234165f540efed1176ee8953f1b1fc005a63aaada4db0236c3be749f8cd499f75352ee7ca63223c9b7773042d05381a080ec8a06a51eef98c55b721e373219e7d8b8b29c33eaa00376ad3a7bafb10f0ed0e3aba1a019bab9ada4e9a09500637bcf3a278a96ef0954d451265ece9125776b41cb0388c50e48073158cee7de4f7272890732bbbd363fe33b72390bb3e9d2099888e12dcb0fe7744a2ade1ab0e4789704a594ce5ef9a678d71d3760e277b990c8f25aa24aa3956c7cbf57b257e81ec4a56c2389045956f66e6fd4172fc41b0515bfd26c5863b9394107d2c3a6ea64de6bf3ae21adf40f2f38f18daacdddc1b7e6dd350da0d2b9342fc088398b6d58873cbfb063b05165cd3d63dda2bb54c362f86cc006267194bfda72225dfe29e0f524cbf77cdbf28043a8671517b881e490e6b9dd14cb0fa02d796f2fca22530e8025b379a2599c1e7a79ff2f84bc8e1c819671e84913cdb63d5a3acbaec6130d479e8f979253676e02f31587aed52f692527a03648886b0f41c6a0ac96c8fbb1246306a1d612ef6510ff907cceb49ba9ce4f176548a23445ab69a64242ce02afd6c9e036e164001bb77bc58e6ba03ba2bd6f6af8e526160b", 0x1000}], 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1a0, 0x4000}, 0xfffffffffffffe00}, {{&(0x7f0000003f80)=@in6={0xa, 0x4e21, 0x6, @mcast2, 0xffff}, 0x80, &(0x7f0000004300)=[{&(0x7f0000004000)="a792d849cbe41e17e90b2ba68bbc923de9c80f6515ccd3958ca95add2b5d6974f0b712780c7f9bf6a1d2935325e9a151290c055ce4252fbfb2a2843d041d0ad369355e1da0e3052eb1931c075f24712219fdd4b60b20a1d428c930be3841327d1b428952ffbcb1fd7517a00ebee0911d1b996d877b8e70b20a67574c959a6bfdd77f5e743fc310d4a2414d1bbed82c60c745b121d15675153489f61a8f198ba95d45e25d7bb2196c4dfd0d4a361827a2704817ec7768fb0cd8f7cabaccda1cf67dbe7d39809dea954129", 0xca}, {&(0x7f0000004100)="fbe1cb0b2603b59bcfba25e0d9b73364c13cdf6ffd7149dec0fcc65654cae6182f9069b9097b8fd316cb423dad36e93bda21486350911a93561595710a4c239c909d89a1da2b1af176e22d1f29a8bd", 0x4f}, {&(0x7f0000004180)="795947cafe89d5aa42d6bf6c4d21ce4d3a9e1ccea6cccf1e48ff1ec554445755758cb7901f2d49af00cc637912ef62049686416c836145aab35a2e3ee474d016bd568b925ee1389833778310fd42f354d6c484afdb75862eb96e742f098a5b8ffbc9db5f183c3b118f7ab94ff3c1f71a57482768041f32a9f52a96932aee515a96e217e1cfcf91f79170c35911256cfe86aa45345e48", 0x96}, {&(0x7f0000004240)="446009c9784d93eafe085f955d9af694ae89e496d6b24b53b2bcb795e0aefdea135a37ce94cf8d45192cdda2aeeb76d87bbfc6134fa2279c9cb66d8040418d128fddb4334ee8cdd04b3c8fadc0251b25b44d1da60131d51ceddade413eb633193248713e8348451cd4d1717e95dc28b301ce53aa2e1fa51d81249add1ce786165ce5d0f1f74d4e7317681a9d6e5153442d94090f9d714971ad79", 0x9a}], 0x4, 0x0, 0x0, 0x840}, 0x5}], 0x4, 0x4000000) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) 14:21:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2}) 14:21:56 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x80086601, 0x0) [ 407.826163] FAULT_INJECTION: forcing a failure. [ 407.826163] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 407.838025] CPU: 0 PID: 23502 Comm: syz-executor3 Not tainted 4.19.0-rc2+ #3 [ 407.845226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.854596] Call Trace: [ 407.857210] dump_stack+0x1c9/0x2b4 [ 407.860865] ? dump_stack_print_info.cold.2+0x52/0x52 [ 407.866093] should_fail.cold.4+0xa/0x11 [ 407.870183] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 407.875315] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 407.880195] ? mark_held_locks+0x160/0x160 [ 407.884536] ? graph_lock+0x170/0x170 [ 407.888353] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 407.893899] ? _kstrtoull+0x188/0x250 [ 407.897713] ? _parse_integer+0x190/0x190 [ 407.901867] ? graph_lock+0x170/0x170 [ 407.905689] ? lock_release+0x9f0/0x9f0 [ 407.909709] ? find_held_lock+0x36/0x1c0 [ 407.913785] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 407.918632] ? graph_lock+0x170/0x170 [ 407.922456] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 407.928007] ? should_fail+0x246/0xd86 [ 407.931908] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 407.937030] __alloc_pages_nodemask+0x365/0xd10 [ 407.941711] ? find_held_lock+0x36/0x1c0 [ 407.945786] ? __alloc_pages_slowpath+0x2cb0/0x2cb0 [ 407.950817] ? find_held_lock+0x36/0x1c0 [ 407.954908] ? trace_hardirqs_off+0xb8/0x2b0 [ 407.959329] cache_grow_begin+0x91/0x710 [ 407.963410] kmem_cache_alloc+0x63a/0x710 [ 407.967581] getname_flags+0xd0/0x5a0 [ 407.971399] do_mkdirat+0xc5/0x310 [ 407.974956] ? __ia32_sys_mknod+0xb0/0xb0 [ 407.979113] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 407.984485] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 407.989606] __x64_sys_mkdirat+0x76/0xb0 [ 407.993695] do_syscall_64+0x1b9/0x820 [ 407.997593] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 408.002970] ? syscall_return_slowpath+0x5e0/0x5e0 [ 408.007912] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 408.012937] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 408.017958] ? recalc_sigpending_tsk+0x180/0x180 [ 408.022721] ? kasan_check_write+0x14/0x20 [ 408.026973] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 408.031829] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.037021] RIP: 0033:0x457099 [ 408.040222] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 408.059218] RSP: 002b:00007efe0dd87c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 408.066944] RAX: ffffffffffffffda RBX: 00007efe0dd886d4 RCX: 0000000000457099 [ 408.074215] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 408.081773] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 408.089047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 408.096317] R13: 00000000004d3090 R14: 00000000004c8107 R15: 0000000000000001 [ 408.128123] binder_thread_write: 12 callbacks suppressed [ 408.128135] binder: 23436:23514 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:57 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000080)=[@acquire_done, @request_death={0x400c630e, 0x3, 0x3}], 0x185, 0x0, &(0x7f00000002c0)}) 14:21:57 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xcb8, 0x8440) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0xa, 0x4, 0x4, 0x1f, 0x0, r0}, 0x2c) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x100) clone(0x200, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r3 = getpid() accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @reserved}, 0x10, 0x80800) ptrace(0x4219, r3) fcntl$setflags(r2, 0x2, 0x1) sched_setscheduler(r3, 0x5, &(0x7f0000000200)) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000080)={0x40, 0x80000001, 0xa1f, 0x0, 0x0, 0x7ff, 0x9e6, 0x7b, 0x4, 0x101, 0x9, 0x800, 0x0, 0x5, 0x1, 0x2, 0x5, 0x9f4, 0xe93c}) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r1}, 0x10) 14:21:57 executing program 4: syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:21:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae8a, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:57 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x100000000000024c, 0x0) 14:21:57 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0x0) 14:21:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 408.379811] binder: 23535:23542 BC_ACQUIRE_DONE u0000000000000000 no match [ 408.394239] binder: 23535:23542 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 408.405269] binder: 23535:23542 BC_ACQUIRE_DONE u0000000000000000 no match [ 408.418374] binder: 23535:23542 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 14:21:57 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x100000000000009f, 0x0) 14:21:57 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) accept$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) ioctl$LOOP_CTL_REMOVE(r2, 0xc0045878, 0x0) 14:21:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:21:57 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) socketpair(0x7, 0x6, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) 14:21:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc018ae85, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:57 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000105, 0x0) 14:21:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:57 executing program 5: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000000, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0xc0045878, 0x0) 14:21:57 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) [ 408.688788] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 408.696057] FAT-fs (loop3): Filesystem has been set read-only [ 408.860861] binder: 23576:23581 BC_ACQUIRE_DONE u0000000000000000 no match [ 408.870065] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 408.873313] binder_thread_write: 3 callbacks suppressed [ 408.873326] binder: 23576:23581 BC_FREE_BUFFER u0000000000000000 no match [ 408.877308] FAT-fs (loop3): Filesystem has been set read-only [ 408.937905] binder: 23576:23589 BC_ACQUIRE_DONE u0000000000000000 no match [ 408.963671] binder: 23576:23589 BC_FREE_BUFFER u0000000000000000 no match 14:21:57 executing program 6: r0 = syz_open_dev$sndpcmc(&(0x7f00000004c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c) fcntl$setlease(r1, 0x400, 0x2) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000500)=0x100, 0x4) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000040)='selinuxbdevcpuset\\mime_type\x00', &(0x7f0000000080)='\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000180)='security\x00'], &(0x7f0000000400)=[&(0x7f0000000240)='em1\'\x00', &(0x7f0000000280)='%eth1&-}\x00', &(0x7f00000002c0)='{em1\x00', &(0x7f0000000300)='}nodev&^+!#.\x00', &(0x7f0000000340)='$\x00', &(0x7f0000000380)='system-{-\x00', &(0x7f00000003c0)='em0-\x00']) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r1}, 0x10) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0xc00, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000480)={'syzkaller1\x00', 0x100000000}) 14:21:57 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x10000000000000ab, 0x0) 14:21:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:57 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) 14:21:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4040ae9e, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:57 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) r1 = dup2(r0, r0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000000)) 14:21:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0xa) 14:21:57 executing program 4: r0 = getpgid(0xffffffffffffffff) r1 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(r0, r1, 0x4, &(0x7f0000000000)={0x1d, 0x100000000, 0x7, 0x1000}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000080)=0x9, &(0x7f00000000c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) [ 409.138928] binder: 23604:23615 BC_ACQUIRE_DONE u0000000000000000 no match [ 409.146090] binder: 23604:23615 unknown command 524288 14:21:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) ptrace$getenv(0x4201, r1, 0x7, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:58 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x100000000000028a, 0x0) [ 409.189752] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 409.197027] FAT-fs (loop3): Filesystem has been set read-only [ 409.217761] binder: 23604:23625 ioctl 800455d1 20000000 returned -22 [ 409.224990] binder: 23604:23615 ioctl c0306201 20000100 returned -22 14:21:58 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0963db8cd2c21040", @ANYRES64=0x0, @ANYBLOB="000000000000000003630840", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x400000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='-GPL+,cpusetlo-/cpuset{\x00') r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000002c0)=""/158) 14:21:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4400ae8f, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 409.345613] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) 14:21:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x400000000000000) [ 409.409165] binder: 23637:23640 unknown command -1931779319 [ 409.440191] binder: 23637:23640 ioctl c0306201 20000100 returned -22 14:21:58 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff, 0x8000000000000, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="00fb5c0574eae0aa00984fa601e3f58046f5b9f4300bc32574a3e9a0755a68fb94a2552a73f44098e0fe0da1b1279a110bed2164ce4e01ac1bea3f000000a87d88bc1c60279dc34419bd440223000000"], 0x5c, 0x2) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3, 0x2000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000380)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x585403, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0xc0045878, r5) r6 = dup(r4) ioctl$KVM_S390_UCAS_UNMAP(r6, 0x4018ae51, &(0x7f0000000080)={0x6, 0x5, 0xffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r0) 14:21:58 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x10000000000000b9, 0x0) [ 409.476744] binder: 23637:23640 ioctl 41007701 20000000 returned -22 [ 409.513134] binder: 23637:23640 unknown command -1931779319 [ 409.519971] binder: 23637:23652 ioctl 41007701 20000000 returned -22 [ 409.575206] binder: 23637:23640 ioctl c0306201 20000100 returned -22 [ 409.586624] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 409.593987] FAT-fs (loop3): Filesystem has been set read-only [ 409.668127] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) 14:21:58 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000080)=r1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040)=0x80, 0x4) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x0, 0x20, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x100, @local, 0x1}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e22, 0xe30, @dev={0xfe, 0x80, [], 0x19}, 0xfffffffffffffff7}}, [0x2, 0x9, 0x1, 0x81, 0xffffffff, 0x80000000, 0x7, 0x80, 0x3, 0x0, 0x87, 0xba0, 0x2, 0x3, 0x5]}, &(0x7f0000000300)=0x100) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0xc0045878, 0x0) 14:21:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:58 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000220, 0x0) 14:21:58 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x400000, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x20, 0x5f, 0x3, 0x100000000, 0x9, 0x4, 0x3, 0x6, 0x685, 0x7ff, 0x2, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TCSBRK(r2, 0x5409, 0x1001) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), 0x4) 14:21:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4b47, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0xf0ffffff) 14:21:58 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000003240)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000003280)=r1) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = syz_open_dev$sndpcmp(&(0x7f00000007c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x1) sendmmsg$alg(r2, &(0x7f0000002ec0)=[{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000800)="1978e372", 0x4}, {&(0x7f0000000840)="7ce71e23ea5724b0e280757f95df93cc590e476517c46c98282ff2e3f337ac9db1917e3992ccb0beb43d568583a297408ed5caf40ac509ca8d147cb98c809d7ee96d79545abde4bd34e38b", 0x4b}, {&(0x7f00000008c0)="02a00c9714f51852a2aabbb10e7d7433df6ad9f0f3b12495618a8b4c92fad725178d7b280af45f4dfc983dd0a2f24adc73269c1d32ddf0283ca7c4294378f0c495968d70e5ef7904780f3676418584b530d06deae8c5028ac14df3f2524b2aea61652722f3820b8c961f93728ef8c4810e96594b70850069280c6bf0b81d4a82fbb1be570f714868e014479143683f12e49e5665885c9fec9b97ed410da7d5beaa6c22520a12b3de84318c9b4aa84b945881c69a7e04e45304eccd66c84d20c3bc4f0f7fdacf0a43a3291c70d95e031177901c30cd16a4a6ccc3c3d552bd8b9d863f8e96ce", 0xe5}, {&(0x7f00000009c0)="8581086e60aec8cbc2f51a348b2a0bcbbd71c67389a788588083d096ece2675376d0707379ae9b8cbf63", 0x2a}, {&(0x7f0000000a00)="e59a950bbe5d3febc8ee04047e9e890d52ec9876056178664ad25f2019b5c56c403d41eb6037c206f81ae4625bc0822208f6799b0e06f55142295293e9ba0728908d852233dd35124817a42d790235de4ebcdbe2d1ac8833905611239dd6982fc731d298321a7e68ec", 0x69}, {&(0x7f0000000a80)="e248827f39ddc799cb4cf67d9fef746e9905cc30ad1654f76ed674a97b40faf2bf7163730e6dea880093b4c887b8cbbc6611acfc6e2b24f9c21647352e8a5785db6dd5518d", 0x45}, {&(0x7f0000000b00)="c2073db91c534548787ebd98a35c36de69742a7343541e852d754f4ee24a460b41908c3cc3d2c0a81bf9269d8cc13eb4fd074c8097cd599d0d1cbc070f606ff7c28a3f57fbfad6a4fc6beebad73a8c035850e6f20f8e2f591971daba81aa062e33ee4f23dfff9ba2b6101cc2a01f", 0x6e}, {&(0x7f0000000b80)="43b7fde9ec6aa0aeef80b97706460b7874b37b9278b8624bc939d67cc6db36cff19234cb272bf3a081ce", 0x2a}], 0x8, &(0x7f0000000c40)=[@assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x1018, 0x117, 0x2, 0x1000, "f70f066af6e703e31e666d1d3f820ab56d9f9ec5e08c8f152d6ad503bc70b2c8dccfe1ff7b6070611a6e5df4906f6d64840afc0aebbba9b18e632ee517fa2d3070ca60aa592875992e377cf2e6fff2711a30e489052e07fbc2448d34a540fab099eddf27de5a51f75647d9b2bf5a049f4ef606cf8e2fe10b3d4b26fab792b35638bcdb92fdacedcee6def8839e3411817d2dca6d0339506a4570419851f5cc2b25da63a89ac1eb63645bc428528c77bfb625b47c45bec41bdeb520c92944f62105c075493ef05e2776caf108400cae7c85da314cdf763ccaa41d6098a365c6b5af5fbbe27aaac442c3b8d2ecfd5a04eaf83b33e2b61c3dd03caba7426b41d058e68e87f5ebb497d6eeee8d1dd1b4a18b8076ad907748d39c5924c7e68489556ad58754633121cad0008da29809b48a972b389064228457e9fd28755345d299c0f76dc503337b492fd4c24164f75f11d25eeacd9689a7e5517bffe4042676560495b7077cb8cc60da94f45f0b9d91a8a3f57b3662a6173718912294d0305f4a780de8fcd3003c453503ac219aa433d2ad49f82d3f060c19d757e771ad4b25eddd3ee33f766972657564088689ce7f8023b1014739f928ef27d1266302e16fdfbd082ea47115e91bfaf9472a4a3d6d9814a63335c498203ba533b85b7e4504df6f24a0d458e96b387b7fa224ac193a321f53bc7b77ea8a0a343985421143f954da8ff5a7229c8d56c9d495fb8d357bd0ffb1000061af6c5e9e0421dddd40b0b43c2d3786c95218686ff383677fe46e76c00a8376d41ca92711dc780255139c2d42f97701c93b9f4a3220cd1a088711f9c4b398ef9400745f795fb3a82d177edb09e16554c37d8c8b04b8e91d2487312cc3a4337ce70948e28e4569f81b7b4f5a8573d77bb1c317795287ee1624409dc3cf8309f2e78fa9edd49932913894d2644377aaa287687ba5470fd3da58ad3e97070d226d44a4716e27baf23d2cc9c82f1910912826934b1f466eaad9225de60e2eb40ffe32a0f6f559451f42e2ddf0c4d0d082c5337085ef22832c3bf9b356855c9def0ed8913ad67debc03a75a2e56658fab6651638d5ed6f90fead949ebbb80b004371ece160a8357ff45f25d12c9cd5bf264a3e520e94d468f52a1ee9ef2d3a175e8365408fe30d8d531c0ae4aa242520c566f17fe1ebebc9ae6500b01787267e2d5ab8e6796f87ddc7108549576ae0533a8dda48974a4e67edd17ae2b80a5c7f8ef5cc0c5128e42880cfa2aedd9b014bf997ae09d418e21ce70102d006e685bd033b9d361a01767afc425cf6d95dbb3d480d2563d8d9c297db968998a6a4c22d44412c2e4ecd2047f4d800cf03432cbe159e2511054b021c19fedabd726c259547f3cf3dcb64b068027b0981a75e1c17b0e2fe6ee62cf80567b9e615b09d0dc9fdc2cc3f8a5d4609f5d9871fa034c340dc65784bf7af3a86724a08f52209175a42f05f3e28fdbf95f3008f047e79c03aa4b486d6fc5ba27ca93f9c9269404308f5ebe25f8eb3c78cc3746f22c85e52dbecb76dd1780a62afb200354517ca77e29c3d507c8a1525700bc0a8f904f2161b254ff6453c43431cd955450019571ce0539c3d46a6354f6f44ca122a96f53793055747e474c11c6890ffb310249da685c2ceb45831e5f55b1e3c159ffd49e0fdbfcd763c814d21439404c96ef09e11532cdd0d9ac25239754009ad0873af85288108beb8b952850965185f31fbc7e7603bfca86df393906c1535792917f7dffc11f8b7e7b71deb9f7f27bba64576e225099772a85cbac62a979f4eb97af314b86c842a47e4d26c1ae34e87c5b6a741e5ad200ae9b91f6a2dc39e13d0253c19a9836884aa5d6e6b696f155d7512ad2dcf38d7547dcb55a1c1bf8b1c8c563a10c5ce285c674fb037f3c8bd27c6a725fb41e9c449a8a7f6f523e928a21bac6fc52e48b276266af9a6231ea05e64b210f2598c123057ee71c2387bfe26719def17432a92ef4bda7b9e459a62b40158d10d96176b98d7c7814e6f849be45e354abd6cebb44d96431caea3c01eec2d2624c70d5777b3efac082be9531a4e21d9d0f14ce10625a5e410b92647baeb6512d02f141d4e140fe19e7b06d907c63ccdfc12e0f8ea067c86d5af776e170580109db5e337af2fd1e82d98e8e1db1e940400b32b332ffa4b821f51a1c12137f45d3d2159f998b37815041961f2e41d8a09e3665684d3310f35bc3c832b9e5b853d4ad1619c53a64f0f0dd76ee5799705d42ec4ddb237453aa9c45b087ba6a1cd2964030e889a67e6c495ba2ccd4fdcc7fa6a65d8a7610f4058e27c676df21dc524c3c9071ea7f09e23298f9924aea5dddd724a960e13e82db390ee6c77189090b2e0f80c2e0cf27efea10862b909847c60aaacf94d853d10e12a300170bae0fb29ac2d59a93b30d7ab698dba646918f11f3d3fec5d4ebdf032f025053e991b6879f5b145e91e4dccdb3380fef159e4825b4a63356c653388d1fd060b058c18ebda7381d5aeac4237627c31cdb483b603c9f09a74b0aeecb01f0a712dedab490e321654e00841c9bd9dbb9591aa6e29aba4e365a362b8516dcb9b0e7f7951151851f044a2532d4024a2c62951b8a5c8737d1c46e25a543a5d6dfaad5695a020dd7cb654ce7524e0a2f56feff2a8c95f1cc13e1c6f93b2e24bb831af9d7b5414926f3c5012f8b14bc960c210400681c342013e6d4d6fa2524e0c8e93feaf8223b78a0a42836e6390b3835552adf893a4e7cac2a6c6348a74412e3695d01fe0d02ca15cec95bd962de507d74d192913d58c6beeda750b20619ad0518dac5bc2ceca011196cbff8da6ab62f528a003650bb8579038dbd8d869274879791a61a55b3d5368e17aa0043cfa091f6d8ba6e9eb4d3697e06d89fc428654111ff1eca1b0dd2791fef1eb649e98b94bf3c5473bcc22df246335e62ee6aecd57e2dc4c96d43c7bd3f882f176c8320c46a1e787408ee31564d13c8c5aaac7fa513d9768be25d81032007e918926238b06e28e31b43524dd30e288fd707062c14711b014dfbebd59e2981608472bf850d292a28198de1e76d693d4e52ac181859c453bde6106008dd29f0aa015f2615ce3fd78774688f8e64ee8f4bab49d3977de5ecd539a60ce4bced12e619c7139d7e862621ffba8cb97073493f7cdd785c8833fbb0c47d8f95035f5f81cfcbe84c460ebb25a00a0ab3d4ba8a4dfe7bb593c51629fb994f6bd994f9c67e8cb5768c950db3224e622bbe7ff612fffde151d253921de4587e514f963f18aa8bad4eef0e2cc845b0493d01a677d5b40a854d188de50325e63a34618906a4c5333fac1e24e55d43631182f86de0864e824ff99301252a7739f2b6857973980e9cf920c432c1ff21b1fc1efc9aba6b02d7d3a452dfd33cf397bc2683b3110eac9c72d0d1e57d9bb1e3d8a62a1bf85face59b4f7945e510cf497b1300fba78e702264f6347aeedfde0a6d5841dd3b5f95eda73605b09399318972304af3a1d5e199b5693a967d10696b3b6220c683e64e144e7296a8786ddb6348e1807e71a2d4543963747d8c4453ccf8ad937bd82659b6f4aca13575e9a347eb82ab67fcf16086f9a3eaf8efe5a335d7bc1803f16d1f25c0c859e5f21fa13f512c418d3951fc62dc31cf473534bf11a135003d4d8fdaa0a54a4407d8e274629cf94e1b0327de9e654b7c7b07f53986a1bfad6516c4225bd5b433b5b69b779916e6c976859a969241f09b99e9ef9915fed61003704c37d2b56e71d631d0c94ccfce980c79d9215cb16f39021c27b0b069ea18c9e66f718b075fb6401332551f37a053699427771968bc03d3545d84c827bc694e0f70542acee4ab5854656bc067fe6b71d52478284fdfe673e986b474ebc013491c31ace89fe18daba17e5e655701004a57e46ab0d3c37fcfd290876955204ef9bbcff5806c41cd48c13a3a743cf17acd7c7227b8ed0a6ae10cfd6e1bd769e799f7489caa6a8121c0d5c52f4942cc78f526e786d6396e46e01c141f6bcc0a9cb4c678dec9db28ca0332e5f92ca146485f9cdf5f9688f19052b2fe828e6d40ce08a551164a4409008294f38e78e27b44a72b9550d7c252593178d8d9d9b4c556cf99759877e424443da7ce3807674e7c5f1c2ad7d511a46c9eae77911279c1650fe23dd3b699d9ed1e15421deae4cb632f6eaba2b13725849bad569566a2200e43efd2a9b702fbcd390ddb97878ebd35ece61e0d5d4b93276d47861767df548915dce7fc5bcc92bfc9a0ed1e709b6f733457b8ce2fb971c6fb475362370b812cf899f4c9f6004d1954d0a1da027c561bf6882be26a8690ccbc18af4497cc7eceb62d026fdeeee2cb0e8a3e86e05c125d996fd8d2521395279ed14f306abb6392fceb64fbc548d006bf5df787684d4c891e57aacd083d5f96464796b2f1ca34c22085f68644433a27063c66467e0118b8cafa15e81ffe3ef1f06838396634fa8f46143abb21a02c484b512a083af60642901195d864b9a37b796256efe94c677bb9dee6cb7d2f65ac457112ea2e0bc7ec7837b0dc38f20644f5034ec8bfaa923089e3910778656adb3b2714efac4d7ba693ee8664fba79e85a71896e1865d9eb0a6291de0c2cbbd79694e10c2e726775102ef0e34bdbaf5a4cbe1619d885ab4396993c943c58f6fb1ea3d9c7299d76eeab120110e22b214206db2656a01cee5a42b76dc46b15f21f91111846fac8627f0a3da952aafbed556b4854ea362a06f6b69cb1cb17233a140c91d3fa4876bbbadead14625df98c89fe94fe560ec888c3634de5d2b2959faa86780720aefe335023ea2adaf635ebe2b3403aa721de7e8b2a00396c042a1100fd7b597817c22adffa62d9b00f48fe71c645f6085d43592bb1908f05fb38d83a6be6f6b73813f94c718893e8d546ebfb86f340391577ec9c091d95dfb20320288d9f881c7ab3aff495c1f3478c9dabeac540400eea471a43b400976fe592ffbcc2d7550ae48c4d9fddcd100e2f277284c17e0df233ca89b873330c2b4de87a813ba0dff5c8253cdd3a805467a7aeb040b6f30c30324b9e5b2ca93c9c8011e7f5d2e4949fce8bef4c29a4984399244869f409738ec4ef11f4ddd8bd6e0f7426e9f0791a3bf4ed22393b322994c6ae40a9c882c7f66b00888b447ef9b4c361ca22d708b29f7dd42a482be60c0c7a1ca16a6b116d519d76eb1eb2f31028c9e5629bca5628a8ace3035821288e5f8d3d7c8bed116e5f23cdfc59adb1b296059d496a67a6be6c8c310bea112b3c5f89d0323d9fe45125d4dc5f1b54d0f0f82d08e95c5f4c58a71a2703784caa7b16de95f33f2f11221f80ca5ca455d96da6618f6230a0d7e1c4be4aac4345cd5d1ebb7fc9b753e845539eab04083ccc39c7e0258136dcd2adb0d2ef49513bee40d0ba6e4dc9d1708d6bef7248447c7390cbeefe5c63f3274207f50906079914108c57fafa42665c52ac05a877faaeba83a56f54fbdefdd515a1012c652123cdbc084abfce72a80693f3c09f30b8d377c665ecbdaa5e4ca24af093e2ee349d458edcdfe4a3d1fdfe5f53bb6b2e6dff99ab77226d3b337c8458671a00f5f55c5b46ba23b73acde31e415fd3b3d9baf4d3f3a583c751881cc10bb6d6df87da06c2140f8f922747ff65fccc3515f56f38f7feeef5287ab9b5a6050024082c83057eabe72e18ea9c9c99f3798698b22d7986167f40f095f0ba898a39e1aaa956062e8a7cee6000287696df3e0718765ed4d4d3585694ba359e4aa07d6697f77590d0b40f0ecc20082a1c0cc227bf8c526fd1ce"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x108, 0x117, 0x2, 0xf2, "92b4d0727e90be41e5eede950f3e065091c344a751e62c939c42258548d0dc037a8e6ba36f1c011e5d9bd25fe01e5bd05f2ea1b306daad5b147ed041f1a4c6a588226e1ce18efc0395217c21000f384e22be37fd3d1ab99c7450a0262184ef0d438dd50c4c7fdfe6bc59c9cfd7e244de0700742701dba0cfd7ca459745d17d39cd9def18c84eb7fd2483da1a6949ed3f4b482aa6632fb4ae03e9f6d1acac8906964254f5ae945f6e543da6d354388c7078eff38d134d2d0e41e830cb1530ba4a2a5978b0fd57b7c7b9ea517f1df59ec57de77419cf4033e7efdfc17b7dae3a4e5077731c3cb5b3524bd3f5789c2c10842a2e"}, @iv={0xc8, 0x117, 0x2, 0xae, "0e81f04ca99073736e99cb1969ff600d659b9eaee3cff5addd12f815bcc7bd5716b16ff31549166a40de8e2da005e1e1084902f9a9c41805e23b80ca0efda8b83f3580012859753b6360274bc4c1b734938fe30d33396d0eb3f2d7742c287f0fa722a788258f557e37e9bb23315a2dfbb7d312f8a79467f483530f84df7ea529881a0b2427149b8b5f72356d6ac10920f6a0d2f6c9432026d6f3fb366e5dfde743c9cdaa20be87373d15ff969b84"}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x2260, 0x20004804}], 0x1, 0x40) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xcc05, 0x2000) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000040)=0x6, 0x4) r4 = getpid() ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000032c0)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYBLOB="0800020004e10800"], &(0x7f0000003000)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000003040)={0x100000000, 0x0, 0x3, 0x800, r5}, 0x10) clone(0x280000, &(0x7f0000003080)="70551d2ddc37d086ce9eef83edc22ba777a7f687f4bae730d1630e1dc8e3ce52b451c70b34c4ec7b7b1da58b3e8ce3475eef2641bf97708c38bdce98c1f73ceab5b9bad39569464f144a", &(0x7f0000003100), &(0x7f0000003140), &(0x7f0000003180)="d0b00b3f237d20b887006eed0ddb4f640e5c7f67cd34ea88bbae38abd8624d7e231b83433c0fa25b4b1004562f020057f0da386a69db94e2b7cf563ac7e9ebdd605d8180398d08e4ab7d324964d68ffa5b82943b7f81e424b7606688724873060f058d626dc2619e5bbde8125604597f6dd6cbe2d62eefda6ab027114fd9adf8014625ec8778f9935fa7cec0118e5bb98eeaabcc60160308c825b8e3e0c89b") syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x6, &(0x7f00000006c0)=[{&(0x7f00000001c0)="1d34f8cbd07459fa718befa3a9f82ca519ea1adf72a508670539dae20aa6915c2b73646c12577445c47bc6e7f98b9e9f12b7139cff60fb2c78760347543ba0633a01d02506215f5ae08b674cc77fdc20a26ff4f95acc990fe1557b559d5c9f876198916769ad24ae70b0e98e3d4ab238a27b8f4632e30e752625a4159865b7a5b04ade2acce0ded427e10084607a02993aacf4956b4e155a9691cbce87b3a057f44f190263bee376b207919d39e22bc80a63a6f327b6aea5da213bda995622c58e", 0xc1, 0xb51}, {&(0x7f00000002c0)="1ee77640e1857513dfe97e143284b47dafb7d27e875ce2a2396e04410ade0488c5a2044ab1db19c878a16c52b1b6c997e1ecec8fbb46", 0x36, 0xa48}, {&(0x7f0000000300)="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", 0xfe, 0xffff}, {&(0x7f0000000400)="cac4fe073ebb393288b1266d72ec149ec4fa1f77b876207cd29549fc1967b7c6464bef92cef2a530e834512ee915d6db46417946a373100d97f71fe7e347566563d46e759fba4e4a8d604627a622808a83f1beb4f95814c74d882cc9c72ccdd64c6c0db07bfcfd287e7f7c01cb756cee11b72994c241ffbc36b97fad541c45f3c61c70133f5fb97d3b0ce0f24b89766d754ad3997f9969ebbfb892d2a3aac68fc0e8efb0dd34562a75e36385df6d54e7cb35c1122c0d52e6523d3d43f07b60a8049e9cf63f7ed82c4d4b61a7c1ea302f69b1343c336596e70ca542ec9a82527a4cd13134a708", 0xe6, 0x81}, {&(0x7f0000000500)="5fe4e0948602ed62dcc26ca1d291e0a065d303a7e87f596c7c58168d0f15b8f404b101578c5683a270516f28664ef861287dae7834a93c2a9d2c8a68c88376495affb450319dadf72df68b389bdfc42f9e53e7adccf7593da8ee83e3aea32981d767f488cb40de6d4d953717bd507aac211e6d0223c465385c39f0f54f576310cece88a161afd53c516901c303f3b1e6584b046b8e59e8837c97fd4fd6bece3f8f07572aad22caa7aa4e92f1e43ddc4097b8d04aba225743481f5dda", 0xbc, 0x800}, {&(0x7f00000005c0)="742acfccffe652ad7e6913f9b9ebb23e96235c12da60f248d1d0a57cb81cb28339b97190d19f33af1c5f3a74e0a3d6ec1ab7d887fb02274a443549e19d639e843556289a85e899e605d6188873d15f3128feb062cf542479b7aa9e0c1ebbceff9b07911f784932c7f465f7d9570f5f94413d0be7383b70710dd3afc70b9cfaeaf65d70e4c3d4b22834c958c630a2408b8de7d229ec9d540ed89ea40b8f8dc12c1738d7bae0dbd30c0e86104b9c65fcc7877910f6febba48aa96419711b3de4bb9ae4e20bf183ec0eb60f29571abe1a705354052585bb2fad19c98c2c9ac54b0e026af51a73b6", 0xe6, 0x2}], 0x2000000, &(0x7f0000002f80)=ANY=[@ANYBLOB="7373642c6e6f646973636172642c00006921a6586e0cc4bc2b899fd1a241d64e73982fe758b13813e6d13b567ed96538d0573a044256d7c241cd4c41ac0ab46cb36a6c360d10c24a1c4f474ba211eda46cff953f019e3c35184c85e6ec"]) sched_setscheduler(r4, 0x5, &(0x7f0000000180)=0xfffffffffffffffd) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) futimesat(r2, &(0x7f0000002f00)='./file0\x00', &(0x7f0000002f40)={{0x77359400}}) [ 409.755704] Unknown ioctl 35124 [ 409.760391] Unknown ioctl 35124 14:21:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x111000, 0x0) bind$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x3, @local}}, 0x1e) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) [ 409.853282] binder: 23682:23689 BC_ACQUIRE_DONE u0000000000000000 no match [ 409.903986] binder: 23682:23689 BC_FREE_BUFFER u0000000000000000 no match 14:21:58 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x100000000000027e, 0x0) [ 409.955245] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 409.962486] FAT-fs (loop3): Filesystem has been set read-only [ 409.965748] binder: 23682:23698 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:58 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() r1 = creat(&(0x7f0000000000)='./file0\x00', 0x80) stat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000001480)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000000180)="22c719bc56d3f4c9c454080aabf5d81fdaafdd92eef46a30f62dd1ef360525c288f40add84f21d96a9bfa6164cce3b42ca734cb75ae2ab8933b15041c00a86ac4ec01e659e00ed89aa87d3de8f", 0x4d}, {&(0x7f0000000240)="beae36015224630bbd281413af7db983548b03c5bf73200088396f6a07782633badbce265b8646", 0x27}, {&(0x7f0000000280)="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", 0x1000}], 0x3, &(0x7f0000001400)=[@rights={0x30, 0x1, 0x1, [r1, r1, r1, r1, r1, r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r0, r2, r3}], 0x50, 0x80}, 0x4000) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xbf0f}) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:21:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x8004ae98, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 410.037694] binder: 23682:23698 BC_FREE_BUFFER u0000000000000000 no match [ 410.114115] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) 14:21:59 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xfffffffffffffd8c, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x1}, @free_buffer], 0x70, 0x0, &(0x7f0000000080)="cbf21f02f3682952d920985b7f5056d752678e91b59a4542143556d974234ae45d5c69673d20dc70265b25661f34a7cac356b4cbba5d5f509e73baaf3f42133b742c788781c9a195623cc30fa3718694bf4f0f5f81e250256af58e4c08b7cb76dd5f9a84b96ec58314b244221259c73b"}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x88002) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000140)={0x1, 0x40, 0x2}) 14:21:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0xff0f) 14:21:59 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) sync_file_range(r0, 0x7f, 0x7, 0x4) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, r1) [ 410.383380] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 410.390634] FAT-fs (loop3): Filesystem has been set read-only [ 410.456592] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) 14:21:59 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7ff, 0x46242) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) write$P9_RSTATu(r1, &(0x7f0000000180)={0x66, 0x7d, 0x1, {{0x0, 0x45, 0x10000, 0xcf09, {0x8, 0x4, 0x4}, 0xa4040000, 0xfffffffffffffffa, 0x81, 0x101, 0x0, "", 0x0, "", 0x8, '^GPLppp0', 0xa, '*:vboxnet1'}, 0xc, '/dev/amidi#\x00', r3, r4, r3}}, 0x66) pipe2$9p(&(0x7f0000000380), 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000240)={{0x9, 0x3, 0x5, 0x10001, '\x00', 0x18}, 0x5, 0x10000023, 0xaf, r2, 0x4, 0x7, 'syz0\x00', &(0x7f00000000c0)=['^\x00', '\x00', '!#eth1\x00', '\x00'], 0xb, [], [0x1, 0x1004, 0x7, 0x2]}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:21:59 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x10000000000002c0, 0x0) 14:21:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:59 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x40400, 0x0) fanotify_mark(r1, 0x82, 0x803003b, r2, &(0x7f00000000c0)='./file0\x00') 14:21:59 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x88) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:21:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x8188aea6, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:21:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x60) 14:21:59 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) get_robust_list(0x0, &(0x7f00000001c0)=&(0x7f0000000180)={&(0x7f0000000080)={&(0x7f0000000040)}, 0x0, &(0x7f00000000c0)}, &(0x7f0000000240)=0x18) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) [ 410.585390] binder: 23770:23778 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:59 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000000)={0x1, 0x1}, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xfffffffffffff001, 0x9, 0x0, 0x9, 0x0, 0x5aee5be7, 0x10, 0x6, 0x8001, 0xffffffff, 0xcd, 0x81, 0x400, 0x45, 0x3, 0x8, 0x8, 0x6, 0x2d, 0x2, 0x1, 0x9, 0x1, 0xfffffffffffffffb, 0x3, 0x1, 0x7, 0x4, 0x8, 0x7, 0x81, 0x5, 0xfffffffffffffffc, 0x8, 0x8, 0x100000001, 0x0, 0x100000001, 0x4, @perf_config_ext={0x2, 0x9}, 0x1, 0xfffffffffffffb8b, 0x6, 0x6, 0x1, 0x2, 0x200}, r3, 0xc570, r0, 0x8) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000080)={0x2, 0xfffffffffffffffa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000040), 0x2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) 14:21:59 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000291, 0x0) 14:21:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 410.645053] binder: 23770:23778 BC_FREE_BUFFER u0000000000000000 no match [ 410.666258] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 410.673506] FAT-fs (loop3): Filesystem has been set read-only [ 410.686266] binder: 23770:23778 BC_ACQUIRE_DONE u0000000000000000 no match 14:21:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x40086602, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 410.765636] binder: 23770:23778 BC_FREE_BUFFER u0000000000000000 no match [ 410.782911] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) 14:21:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x480) 14:21:59 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r0, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) 14:21:59 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x10000000000002df, 0x0) 14:21:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 410.982585] binder: 23813:23816 BC_FREE_BUFFER u0000000000000000 no match 14:22:00 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() getsockopt$inet_int(r0, 0x0, 0x3f, &(0x7f0000000000), &(0x7f0000000040)=0x4) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:22:00 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=[@acquire_done, @free_buffer], 0x0, 0x0, &(0x7f00000002c0)}) fgetxattr(r0, &(0x7f0000000000)=@random={'user.', '}R\x00'}, &(0x7f0000000200)=""/142, 0x8e) 14:22:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc080aebe, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x5) 14:22:00 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000176, 0x0) 14:22:00 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() socketpair$inet(0x2, 0x5, 0xdd69, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:22:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 411.302157] binder: 23844:23849 BC_FREE_BUFFER u0000000000000000 no match [ 411.314704] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 411.321939] FAT-fs (loop3): Filesystem has been set read-only [ 411.330486] binder: 23844:23849 BC_FREE_BUFFER u0000000000000000 no match 14:22:00 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x10000000000002de, 0x0) [ 411.414122] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) 14:22:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x3, 0x0, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:22:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:00 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="1c000000010040000363535c", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) 14:22:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0xf0) 14:22:00 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x100000000000028f, 0x0) 14:22:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x8080aea1, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:00 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() r1 = mq_open(&(0x7f0000000040)='%}\x00', 0x800, 0x110, &(0x7f0000000080)={0x8, 0x4, 0x0, 0x0, 0x5, 0x8, 0x2, 0x47}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='-selinux\x00'}, 0x10) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000200)={r2, r3, 0x2}) socket$inet6(0xa, 0x802, 0x6) getrlimit(0x6, &(0x7f0000000240)) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000280)=0x7, 0x4) 14:22:00 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000180)={0x10001, 0x3ff, 0xfffffffffffffffc}) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0xfcf) dup3(r0, r2, 0x80000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x800000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000000)=0x2) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r3}, 0x10) 14:22:00 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x100000000000019b, 0x0) [ 411.797771] binder: 23884:23893 unknown command 1548968707 [ 411.820270] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 411.827515] FAT-fs (loop3): Filesystem has been set read-only [ 411.839256] binder: 23884:23893 ioctl c0306201 20000100 returned -22 14:22:00 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r3 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000280)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000000000000000000000000000061eb0615"], 0x88) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2, 0x0) dup3(r0, r4, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000001700000028bd7000fddbcb251300000008002b00b75943e632d61c2cfd1804ba82dc9a5289531443e1ead44af7048a1138b6ad84d0bc4ddd0832f292f5417bfbee33826ad8fb2a98efca05ba57b75180749a69d51f5c97a0276183fe9e50b32ab5b136eaf4d6d8cda2defce74c5281dcd6cd18201963182b5d5f3db1c3b8b789ae71d73843700c380b270f0b0c19f08ea626033b5e5f0b46d0754c22af114847182d0401df7320e2e6379cdf947d75076c3109d82e19b106286d18a8bd4a35d443fbed430c3d0ab814a11066b5b72656865f1a05f6d5f5f29c1c52d7db4030652dc072c4d9fe364f7abe121dcaa87fee91e67b98015b1c24c1a83e309e3e395d24885d391ec03ed71daa8208f6bf4f2445d126000000000000000000000000000000", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000280)={0x0, 0xfffffffffffffff9}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000580)={r5, 0x7}, &(0x7f00000005c0)=0x8) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r6 = getpid() getsockopt$sock_timeval(r4, 0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000200)=0x10) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x12) sched_setscheduler(r6, 0x5, &(0x7f0000000300)=0x19) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000340)={0x80, 0xfffffffffffffff7, 0x200, 0x347f5822, 0x23d31140, 0x1, 0x0, 0xfffffffffffffff9, 0x0}, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000003c0)={r7, 0x8}, &(0x7f0000000400)=0x8) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000240)={0x3, 0xc6b}) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:22:00 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:22:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:00 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x191800, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0963be67e87c32fcd15ae5d508f2467affdcae1f069b2084471d96f2be78b2b58190abf6", @ANYRES64=0x0, @ANYBLOB="000000000000000003630840", @ANYRES64=0x0], 0x0, 0x0, &(0x7f00000002c0)}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[], 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x1013, r1, 0x0) ioctl$int_in(r1, 0x80000000005001, &(0x7f00000004c0)) socket$inet_dccp(0x2, 0x6, 0x0) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/163, 0xa3}, {&(0x7f00000002c0)=""/165, 0xa5}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000500)=""/174, 0xae}], 0x6, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180)) 14:22:00 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x400200, 0x0) unlinkat(r0, &(0x7f0000000300)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$int_out(r1, 0x5460, &(0x7f0000000340)) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x6f5, 0xfffffffffffffff9, 0x100000000, 0x4000000000000000, 0x0, 0x5, 0x40104, 0x4, 0x29a, 0x4, 0x1, 0x9, 0x7dc, 0x1, 0x3, 0x8, 0x393, 0x0, 0x10001, 0x140, 0x6, 0x0, 0xfffffffffffffffd, 0xeb0, 0x401, 0x10000, 0x3, 0x6, 0x5, 0x5, 0x643962bf, 0x6, 0x7, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffff5f2e, 0x4, @perf_bp={&(0x7f0000000200), 0x4}, 0x8012, 0xf0, 0xffffffffffffeefb, 0x3, 0x1, 0x200000000000, 0xfffffffffffff001}, r3, 0xc, r2, 0x9) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x40109200, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0xc0045878, 0x0) 14:22:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0xfffffff) 14:22:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x8400ae8e, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:00 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x10000000000002b3, 0x0) 14:22:00 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x102, 0x20) inotify_init1(0x800) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x100000000001, 0x0) setsockopt$inet6_dccp_buf(r2, 0x21, 0xcf, &(0x7f0000000080)="6fb1daccb653e0b5ad1533eb663915", 0xf) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x1, 0x10, 0x4, 0x7}, &(0x7f0000000240)=0x18) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000280)={r3, 0x401}, 0x8) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) write$binfmt_aout(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x126) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) fgetxattr(r4, &(0x7f0000000380)=@random={'btrfs.', '/dev/cuse\x00'}, &(0x7f0000001080)=""/4096, 0x1000) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0xb5, 0x4}) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r6, 0x9}, 0x8) getsockopt$nfc_llcp(r2, 0x118, 0x0, &(0x7f00000002c0)=""/184, 0xb8) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0xc1105517, &(0x7f0000001000)) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f0000000000)=0x3) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r6, 0x20}, &(0x7f0000000100)=0x8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0xa, &(0x7f00000000c0)=[0xee00, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee00, 0x0, 0x0, 0xee01]) write$P9_RGETATTR(r1, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x0, {0x20, 0x3, 0x3}, 0x2, r7, r8, 0x9, 0x200, 0xfffffffffffffffc, 0xffffffff, 0x2, 0xff, 0xfffffffffffffffc, 0x6263ca3f, 0x9, 0x8, 0x82, 0x7, 0x6, 0x9, 0x46e}}, 0xa0) syz_execute_func(&(0x7f0000000180)="c442a3f52538c1a92dc4c2e9b7eb0f01ee64262e66410f5c4b008f2938945cb308470f73d109c4c23d9c00c4e1fde6266dc4a3050dbff0cf0000d8") bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) [ 411.969707] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 412.057388] kernel msg: ebtables bug: please report to author: Wrong nr of counters [ 412.106052] kernel msg: ebtables bug: please report to author: Wrong nr of counters 14:22:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 412.169063] binder: 23927:23933 unknown command 1740530441 [ 412.198092] binder: 23927:23933 ioctl c0306201 20000100 returned -22 [ 412.256238] binder: 23927:23947 unknown command 1740530441 [ 412.278685] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 412.285956] FAT-fs (loop3): Filesystem has been set read-only 14:22:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) [ 412.300981] binder: 23927:23947 ioctl c0306201 20000100 returned -22 14:22:01 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x10000000000001ce, 0x0) 14:22:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:01 executing program 7: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r3 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000280)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000000000000000000000000000061eb0615"], 0x88) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2, 0x0) dup3(r0, r4, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000001700000028bd7000fddbcb251300000008002b00b75943e632d61c2cfd1804ba82dc9a5289531443e1ead44af7048a1138b6ad84d0bc4ddd0832f292f5417bfbee33826ad8fb2a98efca05ba57b75180749a69d51f5c97a0276183fe9e50b32ab5b136eaf4d6d8cda2defce74c5281dcd6cd18201963182b5d5f3db1c3b8b789ae71d73843700c380b270f0b0c19f08ea626033b5e5f0b46d0754c22af114847182d0401df7320e2e6379cdf947d75076c3109d82e19b106286d18a8bd4a35d443fbed430c3d0ab814a11066b5b72656865f1a05f6d5f5f29c1c52d7db4030652dc072c4d9fe364f7abe121dcaa87fee91e67b98015b1c24c1a83e309e3e395d24885d391ec03ed71daa8208f6bf4f2445d126000000000000000000000000000000", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000280)={0x0, 0xfffffffffffffff9}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000580)={r5, 0x7}, &(0x7f00000005c0)=0x8) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r6 = getpid() getsockopt$sock_timeval(r4, 0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000200)=0x10) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x12) sched_setscheduler(r6, 0x5, &(0x7f0000000300)=0x19) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000340)={0x80, 0xfffffffffffffff7, 0x200, 0x347f5822, 0x23d31140, 0x1, 0x0, 0xfffffffffffffff9, 0x0}, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000003c0)={r7, 0x8}, &(0x7f0000000400)=0x8) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000240)={0x3, 0xc6b}) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) [ 412.392786] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) 14:22:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4004ae99, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x8cffffff00000000) 14:22:01 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x4000) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x80000001, 0x5, 0x7c0, 0x40, 0x6, 0x200, 0x3ba, 0x101, 0x800, 0xfffffffffffffff9, 0x400}, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f00000002c0)={0x3, 0x0, 0x5, {r3, r4/1000+10000}, {}, {0x1, 0xfffffffffffff800, 0x0, 0x8000}, 0x1, @canfd={{0x0, 0x4, 0x4, 0x2}, 0x2e, 0x1, 0x0, 0x0, "816ce20c4b908f96b1d7bcf97923c1eedd21caaa9f1073b1fd539eafd680a5223d28435d1f6990ef590afd61d4b17bae89e483c8ead7ea7eea15ef9fba2ef6b0"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4008881) [ 412.555909] kernel msg: ebtables bug: please report to author: Wrong nr of counters 14:22:01 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x800, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x200, 0x9) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x3) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x9, 0x40040) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r2}, 0x10) 14:22:01 executing program 7: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r3 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000280)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000000000000000000000000000061eb0615"], 0x88) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2, 0x0) dup3(r0, r4, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000280)={0x0, 0xfffffffffffffff9}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000580)={r5, 0x7}, &(0x7f00000005c0)=0x8) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r6 = getpid() getsockopt$sock_timeval(r4, 0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000200)=0x10) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x12) sched_setscheduler(r6, 0x5, &(0x7f0000000300)=0x19) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000340)={0x80, 0xfffffffffffffff7, 0x200, 0x347f5822, 0x23d31140, 0x1, 0x0, 0xfffffffffffffff9, 0x0}, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000003c0)={r7, 0x8}, &(0x7f0000000400)=0x8) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000240)={0x3, 0xc6b}) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:22:01 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x100000000000016f, 0x0) 14:22:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x1ff) 14:22:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x1000000) 14:22:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae93, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 412.806792] kernel msg: ebtables bug: please report to author: Wrong nr of counters [ 412.850391] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 412.857632] FAT-fs (loop3): Filesystem has been set read-only [ 412.919353] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) 14:22:02 executing program 4: openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/access\x00', 0x2, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x4, 0x900) r1 = dup2(0xffffffffffffff9c, r0) getsockopt$netlink(r1, 0x10e, 0x7, &(0x7f0000000240)=""/4096, &(0x7f0000001240)=0x1000) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x20) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000001280)={0x1, &(0x7f00000001c0)=[{0x4f, 0x5, 0x14, 0x6}]}) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000040)="d85f0b1b2929255a14f0a5523292cfc49ab9a5aaf47bee9ec9eb11a4f9659411e7e875f77665718b996dfe5de0299a036560a89e0c53fdc4a784b401751217f8d65348db2d6d918fecd5c8a74cced71e049539b10e97741f4c179c950303ca84621f8a7c03cb76d0c9e774c7f323897bb48286528c880c17c2b7e1557ca4f9eb1b150e7fd22792996e21ac7a8a88f5df94de19b7ffa941fe6b6ec91bde"}, 0x402) 14:22:02 executing program 7: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r3 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000280)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000000000000000000000000000061eb0615"], 0x88) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2, 0x0) dup3(r0, r4, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000280)={0x0, 0xfffffffffffffff9}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000580)={r5, 0x7}, &(0x7f00000005c0)=0x8) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r6 = getpid() getsockopt$sock_timeval(r4, 0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000200)=0x10) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x12) sched_setscheduler(r6, 0x5, &(0x7f0000000300)=0x19) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000340)={0x80, 0xfffffffffffffff7, 0x200, 0x347f5822, 0x23d31140, 0x1, 0x0, 0xfffffffffffffff9, 0x0}, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000003c0)={r7, 0x8}, &(0x7f0000000400)=0x8) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000240)={0x3, 0xc6b}) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:22:02 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flistxattr(r0, &(0x7f0000000200)=""/227, 0xe3) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000100)={0xfffffffffffeffff, 0x7, 0x3, 0xdc, 0xff, 0x6}) 14:22:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0xb00) 14:22:02 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x10000000000002bc, 0x0) 14:22:02 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x80000, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x101200, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open$cgroup(&(0x7f0000000040)={0x7, 0x70, 0x2, 0x4, 0x2, 0x1, 0x0, 0xfffffffffffffff7, 0x400, 0x2, 0x80, 0x6, 0x2, 0x80000000, 0x1, 0x871, 0x997, 0x8781, 0x1ff, 0x7, 0x6c, 0x37, 0x1, 0x7, 0x5, 0x400, 0x8, 0x3, 0x5, 0x6, 0x1f, 0xf85d, 0x0, 0x5682, 0x7, 0x8, 0xffff, 0x10000, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x800, 0x5, 0x3, 0x4, 0x0, 0x3, 0xfffffffffffff001}, r2, 0x4, r3, 0xe) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000280)={r4, 0xd69, 0xfffffffffffffff7}, 0x8) 14:22:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x5452, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:02 executing program 7: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x102, 0x20) inotify_init1(0x800) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x100000000001, 0x0) setsockopt$inet6_dccp_buf(r2, 0x21, 0xcf, &(0x7f0000000080)="6fb1daccb653e0b5ad1533eb663915", 0xf) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x1, 0x10, 0x4, 0x7}, &(0x7f0000000240)=0x18) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000280)={r3, 0x401}, 0x8) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) write$binfmt_aout(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x126) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) fgetxattr(r4, &(0x7f0000000380)=@random={'btrfs.', '/dev/cuse\x00'}, &(0x7f0000001080)=""/4096, 0x1000) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0xb5, 0x4}) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r6, 0x9}, 0x8) getsockopt$nfc_llcp(r2, 0x118, 0x0, &(0x7f00000002c0)=""/184, 0xb8) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0xc1105517, &(0x7f0000001000)) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f0000000000)=0x3) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r6, 0x20}, &(0x7f0000000100)=0x8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0xa, &(0x7f00000000c0)=[0xee00, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee00, 0x0, 0x0, 0xee01]) write$P9_RGETATTR(r1, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x0, {0x20, 0x3, 0x3}, 0x2, r7, r8, 0x9, 0x200, 0xfffffffffffffffc, 0xffffffff, 0x2, 0xff, 0xfffffffffffffffc, 0x6263ca3f, 0x9, 0x8, 0x82, 0x7, 0x6, 0x9, 0x46e}}, 0xa0) syz_execute_func(&(0x7f0000000180)="c442a3f52538c1a92dc4c2e9b7eb0f01ee64262e66410f5c4b008f2938945cb308470f73d109c4c23d9c00c4e1fde6266dc4a3050dbff0cf0000d8") bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) [ 413.251935] kernel msg: ebtables bug: please report to author: Wrong nr of counters 14:22:02 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2000000000000005, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:22:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 413.329132] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 413.336382] FAT-fs (loop3): Filesystem has been set read-only 14:22:02 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x40) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$KDMKTONE(r0, 0x4b30, 0x4) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x1, 0x4) fcntl$setstatus(r1, 0x4, 0x2800) 14:22:02 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000031, 0x0) 14:22:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x81a0ae8c, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 413.497651] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) 14:22:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x600) 14:22:02 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x100000000000008b, 0x0) 14:22:02 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x7) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:22:02 executing program 5: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x2, 0x0) read$eventfd(r3, &(0x7f0000000140), 0x8) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000200)=0x3, 0x4) r4 = accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x80800) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000000c0)={0x2, 0xffffffff, 0x5, 0x7f, 0x4}, 0x14) ioctl$LOOP_CTL_REMOVE(r2, 0xc0045878, 0x0) 14:22:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0xfffffff) 14:22:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4004ae86, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 413.784568] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 413.791878] FAT-fs (loop3): Filesystem has been set read-only [ 413.872257] FAT-fs (loop7): error, invalid access to FAT (entry 0x000006c0) [ 413.879590] FAT-fs (loop7): Filesystem has been set read-only [ 413.936865] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) 14:22:02 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x100}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:22:02 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x10000000000000d8, 0x0) 14:22:02 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) prctl$setptracer(0x59616d61, r1) 14:22:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x48000000) 14:22:02 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc0189436, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:02 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x100, 0x20) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000000c0)={0x10001, 0x4, 0x9, 0x4, 0x7, 0x8}) r1 = getpid() sched_setscheduler(r1, 0x100005, &(0x7f0000002500)=0x2) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x10000, 0xc0) mkdirat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x1ff) writev(r2, &(0x7f0000002400)=[{&(0x7f0000000240)="1d7d5bd00b9f25f0c41b2b925edb014ad7c793b81ea170ed5d8faa0fabd517c94c553d2a8b1ed08064ddde8100485668cc4b0ce75d6e398592ba9e273780cf7a3d77f3effa4a58bc5f2e5bef34931f8e8ac8d652ed7059a5352789ab3f6ceb22ba1957594247f97ac9482cd26b05ae6d9ea2c17101a26999a719223f5072104b0762c3cff7e911dfbb92a9db2fe3efce28a5b816696c433ff425f898eafbc1ecdfaf1a21ec954183622cb7f2caa349c542c6c23b654db75a998a949f026d90ffd38b65c1a0ab461fd1c6ec084d386117ff079b304cc3509021d0bbfc302a70287e1ebd500ea15acaf1141bb3409505e1fd2f57368fcec388810e9440c8b9d500e29987739763c2cbac8b2a7d0109ab84ec6995f8660fa3ef75273ab60f62a6781aa0af078011c5f96811123162385d23e10e0c1e7f08c3ca6c7ff2ec01d370e9023a6db962e8f72f652798b7df37291179a9e5bc0bd9712e5cacd8e639c2bfca55fbe1e620dab267260e6a975e2f2727bcc885f6b834cadf0a0a4d6b40bb6bcd8d5b99ec85cc954e5c28a209a874a751358b7341c67d2d97dd1e00d423b5e69373d511c48ee2f48539b9af00f0a04c496c42a1eb5befc19915f74ce43595ab6446a6a0a6da8c7468dc2e7d51b6d003f9480de91163ec6dedccf3dfea3fd804721bb1c6b100e59f20dc8acdc7c7325707c7ac20d00598377467bba0877dc29e39df20dafb15036a75bc15f4d9a6a1314c75fee70028e871effe0f2f6e632b6ae9340b125fe2621f8dc2fc60eec0c6552cc76c517038b1ff75b473b39be24572e5f7629c65cff091fb0b636b7d5470251d9bad2a84ad56767fc3a97793cbef03478ed579f05c30ca3649883f37c23b0c9792e8b3ff8890c80ff7d01d166d76f9747cf9f2111489b42fbde88b4eb4962438199943f65bbf512808fa4fd98977efe5c8297b6e8c1e3a8dc5380e35674343705c4927ff35e8882aadc265ee6ddbc30762c49ce333556a8ae242cab7e9e3024a060718a14944251b82fe6dcec3c71c0a5b0bdce1fb75cb288075ce0ece2ea72d18d3c8301e44249346d423b7c3891f37b6e1cd0d65461b99a01eae6b2ac688e000a25c4048cd5e040050b5f64736a105d8dac087ac6e0843b5ea187ca6c44269f0cf3c5e2333f2405e7df9901930eed44a85bd6011927cf189cf26f430e7266f144e992c3493781209a0a334362a7107b62221c2e86f21220bee26799d7773f0b124cde0ffff1f405d843e4e9a69b3273841f034104d8930210a027f4fca9ada838918711ad85320afafd58d21247f26728653a6de53eeb650a0b22f10b388698eade68648fd4c96399e1f47f7260d996c3d2f47dae850ae38185ac41e95027fcfe8ba5517fe34749430ae0a7354b18fa5a0f49d6ddf928243240816426b185296cf4da25e280ca947804af1c4b4c21a032998571313ca5e4df5d4135810d28b7958cd28fd26e03190ec02e401d62bce87a14836ccbc353a327da26bc74a2fe912c1ec23741a5cd43695d55855ab365e1ab7813d44c254cecb2b45c0c27137b5806a55c2f84906e3ac2a56a3b7cf210590ef49af2f9f093528fd7949d56876e6059d2349aa595e1f323a5c8aa40760a8fbc384b0421f8de23dbd73fe15f0957b948ab129e510c23ea4d4a5e4c4c1b0913d20efe862abd35e841b2c2afe47411bd49d0a00fc54d2b25fc7347e1e14fa173e089e42b61333961e79d5e28204bd9f821f3cb7d8a2f7477f552fc73a17097f79c2f9cfdecc2df15c207e62a1978dcb29e9964f5cbf079a7d93fd918d3150e17b113ed9c198b6d1e255b5b13408251e642a29ce3f9c3d7720b3e442ee1b173450153b007d67b1c3745aa4ebc8032032d69f42917bf2d8b738a04b6532e3558bf5eea2e7984043dc4a04a4a387fcd84e31e3e7a08169569aa3eee3084ae1a8ee974e78bb0914e2a7015a95816a3faf21a8ec30927c8da30986ddf4c080776d4ec0c625cfb8b39c140a4ab6034ee77051773722a7e33560eb60364d8d2f03c4df0051eac3bb61014c0dcac9d6ccea31c5dfd64c247bdabddcfe274f63546f4ef73df55ff3701e77dda08640d1f59104ac3c0be89e42d653911b5dc86f4b362cf5e172544c0562d3195181d57f92d4f28d09913414a831eddda132aea08621beff517c8f75a24b76573b30c20e45169adf8f629786d60d2fef6f019dadd842a2915b947204b68f4b76907a7703d7f19be61d0b6b53ffb2dc46f4226517407a93c6d2ca3db0700d751cdc41b68ed14b35eb5b42910110a4e98a5d94f669584917dc78ca3afbb34cc7a38f78023b181c6d2246657775e2e9467393043f9658950d37c3f023fc4fb2c8d5872849bb0bb0618010ace999ea1487d3aadfa20cae84458b08f975676a37042b17a5f710fe67b9444a5613e20cc244ae76646e80a5edf0c1b429857cc38510e6da787125cbcb565495613f0a4ccf3da918fd10e4d9563a0070c0bb2bbdd0b9904e8f5cdd5fe1b1c07f929c395dc7a077eef766994042662fadf97a96bf7b9071f8ce5cade7c83c939d5c7d8bca75fdd61f6faee023402ed8e72da54e990aa44e6945e320b195e124b1984c4ba6aed7cacbbf42b21be17115a916da49202da43867728407afcd45bdaf69199a7078a8f3afd9d344bf222db1fc991b529ac676cce013462b717d687b07a2997997f1c3e75774baf0572f51be378266f5dd93adbace37f0079a79c7e4d605829eef27690076d28e7c9f603b576fb39482d92df1d1d74e83290887d3776ef099f6d0c0d1a71afaad41f2a6565193c2111df7ee6946090ce6d8bf550f98aee5bb020a668e96c3cf38f19c3919161aba30f7bee9e448f4ce005fcc4aa7b13892679e601dbb19c79c1c8be024c0b2116a55579b5e14ae42b7cd328472074505fa1df6707d588f984731b11d36bf7a89fd50eea941529e5c6041a47227ec6ae4d0cce825ed9cc0ab31b52f56de8bc29705e451ad7ac7294ca03ed4870d6e7aa6dd2b837b0d0a466b16130b286ecd973a3fdebce5e6d0e42372e8185a5a01bc149420f260c9b6e6cd7dc11e6d130fc40f79a64f08e2675362ce7792e2f3166ec9a3d665a7b9daa1dc334f30812e4099ae13b6f3ac644346422c605fc7d54b969900b4a527c3b84e66ceb7dc731f634b42a8eb4c42986461201c36c65d60c89cb60a38f3063d62fd4a48a33f6ecd8cd289d1e20ab4d23c15be0c8b44a1feba29c304531b0b45bc8e2896dbafe311d5b0abadfad1d56449d2bebeac1af39a690b08254d621ae00c8a12b03772207534bc6f8b76e17b80633307096cfd7c738a55dbc8089cbee7ea6b9b6d451afaac275d2a9ffb89b8de7deb4f070f1510079e0b55333f41184df2b620b33a7f16ed3c1b742173eafe0b7e0214c7c3fad365016af4b8caa831e2bcef54d1530b598833e9e9b9e3bafd0417202cb19d73b34f38c05c5bc44dfee0ad3313a48192735308bf85a4ecf6924cf24114613bfffec6ebef03c8ad266c5457f31f15712081f4874830b5534e6c9e8f9962acf92959dc9b6aeddb22833e0680bbd5da0d8df5ae1e001f1cff1687b3f830353a4f3eb835b162d80c70d1321ed3b2e84c882ba4dd5529dd58862d48fd1694ddacc0e336b78944a044a3ca92a60c63cd6c009fc049ebfcce1942445184261597f989f7c8300ee2a12a8d80470a17270340fb0936968aa50f0cbfc686a330de3a9ccc1165a15e5ff0923d5ba774f744876b93ef39d1bab075ab8bdaa02dfb346dede6bef11e3342159117e468579b16494678e03093e08a6744a774ea8480194f9576c53346f317b9b5a108a799c4c351e1e1f4513f12cfc641ac72c7c609fad35179099fe1ceaf9cb02767049c935d57276c646dcc5e262fe184920d3c387b66082dcb7b83b09bdd50a8b31823855d1623ca673d68a1aae4942a2a65a55ae28a4c6cef800b1de7a3f682a6cf6255d464856bd06cf8cf60768eff1c36756415de49ac5000ef74ee2991fdadf1014c7d62958834039a02cbec8c91e663f7082c8003325eff89e6a106070d4982b381705d3a38f7c5540297b4833541528320d5338e849d07f0bf4da96327cb0b42325875154cb0223a51090dea6413c0f146b50334858689a2ddc2d5c30da5baacb70ee5a560063425dba2cd8c729365cb8ba320b543f553bbe8bb526fe1665cd5ef1c8794b070725aa31db7b43f5ae6248413ca60f7f1fbef4b67030583c5bfba7c29ad0ed090f6dbfd42d00f9a2673829fa7251b223fc96e3752defa8ab575ca2b8c4db9138654ae6c9a54c00aa5b83043b10fb4967eb67529fd06a9e1290b12d86d870cdee04389cba28c90ed14f3c2a469359f846a9758e8d22824b56b718e69832a4f6a2e458738a4a47de06a4b809aae295cbee2109f04f0a60e0fcfede3b2dd078d91270d1d8a05be051d95fd7ae3b7abac78f12d76b7dba42455675f25360822bcb9297b5c1a9da52f9070c922d7100436f88267ac7ef24db1b4f6bacc54142203d446d0759fabdc18075e2ae1c24f086e9c283742087ccd5b0cba9d7cf28ee41cbe7a8bdd60f8c8123567098cb329b954a51512d0ba93aff510e7cede690c7e5e5030c3b69fc1138ee024f2bbeee91793cdc2ae291e13d4e8f4027d0e99e8ed9efb53d3a9f99e96856e7439f6e47a22c37e46cc47c62550f6c8b13f7cf39493f0a8e7bdc844ef3fb31ba8f0140dacbf00157ec112386752b3f7f1b1861ffc90a203f136f57e18b4acb7c3a7aa09cf8c581be5b1f62315f54c30f98dd0deb1d2f3c3fb4bb149e884d139757547c63d29747d11332a052dfc40acedf7524f473c167de5eafcd72e6aa3418bddc33b1551ce0dba18ef4b442ea3dd8172159f39a58d6afc1d6a776b7fde9717edc2f8d5175461d3cfb617a5b2e9628a11ac5120894065627d3adabc00029d5f3ebd52261c68bac66b4b2b095bf0de41a93ce5293e0505c85064d9c87d1308d0d815946d4104e5dad3a078758420349ad1aacad38f779a01e889ccec9f477b59ce09b1ba9e31934f0ebb654c0e77ebcb4a28126b0fd333f1a170657dd99050afd6c490bef58ae2a4d7093047f5c379da626c3dbaba90910b5abe540877ecda6a73502e4517b2e2cd606d475d123e622c8dd33756889fde70941e9078d6fff2e829d082ed656971797174af509265fa44884eb54d490854c19bfecc91bde955a0af9bbc85e6c180143dd3cfff52200fb31947476565bcfc52425194f0c10f0e28020cc4c896646f7b9b215b1d7a8fae85fba09fff63a87b6ef159bcd5aad07f6004f563fdcc023292d934157ee1556afd8574c674e2d692352285e8d139eb61a763804ce95f37886c74ce562779320ac39c2d29b671154ab54f724c548e8c7f5e7b93f9d2422ca0d144f0069947ab0219d5c09795d65dab1e2d6fb32e5f44dff557fd52ccc0b5e945c15c031472e9771e8d40d10f1d45bba65a77ca44d6d5e76c965156544e8752403578d129f06cef58790d391ce31306b5765a0cdee280b39c23724e5a1907e6abb85a43e16e9eb132651d6515de0e502f42b564ef03ad0eeb5895fb744e5e8615d3d3661e45b5da0727cf984c27e9b2b709bceb83ac0ae3b75d2316d3bd80a1ae486567893cf1089bf9e0be97bb5960ba2de50adfefb40424ccc1ddc973e1baaf99f687b81656bd76b3533ca0134ae71c8fb0637f2223e148c0c0891842ef90aa246ec91775166dd3bd03baf277ca33a5d7eb3ad606104af8859502400ad3e81a6c6617fe3ef116910acdb38312a78e1d0b1fad07", 0x1000}, {&(0x7f0000001240)="40d727e7b4fe9023166959790e1e3d8689313c2790d2c57d39aa9b2480287bba4f3321ad121402208e46d2ec4f640a70b8166025e6cce9893bc9026470716cc5bd612ac7d74d76631471dca61b56ce4bfdc536de5d2d4df8871b1dd81d71be4e88f6f6db5a9fc1b3283873fd59b27d8771579650b504df6ae0d428dcde0b20204e575514afff09b613245019fdc20e37718a95799f739cf136ccd9dd3d892fd9326c7bce24002dd3d12edd369c45eaf88d72820e27d1c8a255ae658845a16bf76c126fd82261945e25f05eafb6a032d7fb8f0826eed43f42d2fcb95e8a26833f70e081cb5156e646cfc73209b465b4954598259566e88641da74293cc2cfbd521b866dca8086453a6752219e8f5c07e290b59d9cc98a90c5469b522ab3fa7fe5e90a7d2686c75b32f20800c39db2323e567d5cd71e285eb8700192277bdbe468eb4b103267126cbacd2cd09bac1c73859b7ef8c09d35f8959084240a066035c4a3fb17029e131693bae41f324a07e8dddbc9c805f8a05b670d9f03b7d32e99e91ec3aeea9e3d571fa059a651cc4bfa78995b9072f8c205be2d6d312ffc7e76aa5ae4d9ef93a75948aa9110ba4cdc3b623f4fd190ad32515c168792cc394954d551236df75d8558dd75281583cefa7c721e3caabc000c144c67e1dbe25bc083e9351ea6dce46f76ee8a3863429a7c2f1e38519e1887aab7a073b5d212f8686ad8620676ee0947a335dbd0fce252198c34066ec20edeca6e61c917b5a1c0b33e4fa3513fb6dfb91b3beab465699fc96853a2ecc4709d51fb0109dd42d7c9aefd2ac4ec7f9de1f2117924d61991656cf27573b9ff94450fa089c6ecd9d7379127b45dc365adbf2e590fffe9fd332943e6bef6df22a7d563904f3d56089f5bc5c23810fd76da1afbc1eaaee08c521cdd9e51007ee894b787c693e9a2be17c23910b8d9c42268bf6f251a2f0a144c85cbca746f90c2361de0a0e164c8692e2b0a2ac359352a2c306ee579948a85ec7eb7d1c62de87323fc3df039b29d04f48eee1bcaca73505abb09c32770b8fad9a56af7f574ca98464f8061acbb6416a0ccca56618ab420c318b47e89cf50eb6e58e261f74be5159dc0d1e9f8e440594184be10f9477647e56f7329935228c76c41f38a39dfac772e8a1ffcee38a312ef902209d83324b815c78397cbc83ce7f73c7e4442c3e981e6866834ebed4e13db6123bf0dfbe184801b8a4908dce88a69343e74b869fa5f2f3850f49fab5114b02ea829cfc87406a96f309682583e19a6528e0319b56dd4950378b331eb4108072d00468a9d11b050a6234294bfba3e6b3436bfac37d285c09eb804b69e54151aadba8f6d6f8793604933735ac583fbb43614e8058c213b23cd8cd6f3189742581b18a0ef89dbd31261545d909259efd13f8966b4255be5481dc1c8f195a2e8f6571b1452d94dba2beda9c90b3ecc1e627c072c95b05c45cdf66a109511621d25b8adb8b31bb8dc732318af5f21f9c3273c00312e35f13248f283bf90752d0b222cc5dcbf5786885b9d010d87279be6ad6cc041412ad23c3fc07e240b809a4fe05fa657a74939d88a2d299d0fbcea3066f4ed57c57cbeef634b89ec131f92894b1c728e1709a8b03ee9538cde5310bbb37a97fccbbc8de4a4fb6b319f609a15e2544fb9c805350ab68714f2d80804d36e741f76b9449da5f55f47ad0981999276fd5bea1c6f9d8044eef7c704a09c883e5e9378854d922f68c4da83b1b0ce225679f84cf90303fc551e8e7685d4a4e95e36ba6aa06e72708a9928e747335170b20b4f42407848c4a5b843dcf8fbaaef6dc1228f84e29b84d70c8e8a2dd3a7fb4a6da7cb85cbdb88753cdbe3a51f964e9bdc8a73e59c8fdcd8b0135161fd25ed521657cafca2864bee51b5ab30496f07b08c24ba518aefccd8dcffaec9eb3d3cb277c221ccf54a9555f33f08f35c6c09a7c3c19ea28c5ed7985b1622814f152cb42405e79e3bc3a35ed6741d3e3ce6feca3fa7ac6dc380d63b5de542c48266004bd6836f2fef74a2ab279236f9dc4892516099927cb1871b901ebbffe0261be03491332c729ac81ec17fa94f89f10c03c6b571145317cfccb894e2977355b44db6e6876340f9543c9e985a5ddbefca7475e47d120266d799ffced2c061c6dcac175f7d4408b11ec217addcbca60171bca4e8cafc7913fe08625ebcf97b4d10c59c27518fff0c76fcce0a80e84fb0cf5b315e55ac58a706fe560113cffc3d61ef6ab37c7afdc16fa13d2c0da4e4baecf72cdc7d0cf05888cf68b01aa741d231665ecba176949e441bba81a50aec950aa0b8baa457d2283b178bbf04d419567991c2557b75ba5b69d1fab10a76437b133d69b456331c906e0c96e29604926c47092b901c6603f44cdc743c6b6d695f68136c0b18c59a022cb3632a4c9eb7942b28f2f8b840dbb68a1148babccabbca5681d521e9f9a830892b694a6cbc6f1c7a581f3943881dfcc80eb60c21c1ea831168c84de2531fcdddf8370acafabe7604acc9c49d461738718e2113c0aac866994a2036d53789a55713225f5ae53d4093e8b900d2e76b169342f65a26c09917d54f232fa0d6dd923bdec1a88e31991ed325d52aab4eb05ca35c1de47898a3a027c026241e1de87031f93b651455d8352b9f027c1ebe85381c2d87ab8c12a3ecc29e28805b265930231b27490cd2de9390540d5f852a22adb1b05467a2aaf4b0a5156e4cc86011493741820e026c7369686554c07f52d5a3dc5c5d4b8ec64e0273f7964f4b6df0f3c124b873ea3458a79b1b8b2e2de4bbe49881a7a33240fa249dd3ebb3975acd3a8d236d5fdc3e1ad1f60aa6da0988356cd4e802dd68aaf8561a4597c7e5b14c9ed2036c9c4ee54351845c3e4cbd124294708820ca41c4d60608560d62571af79e5301addd13a0d1e446cddc546348d151c31893cbaee4d64a435a9d2a1425fe3be34cd7d8f199164e658c35ab92e1d031cfda771c066a2063924809533cadb587f5a22af0a5d95e804d3e20a46826cf063349a71722ba564af1cf87cd7897d183407f8b44a5075fb4b15ec679105b32cf2df126a7325c83adefc2b3620cddd229ac07b267379fe8569f0fc9ebc7c62180ea756e90b2e62760609541d1cd6fab5e72450d78f3d0998069d1c337c5df0c340f7ca65e7ed6ca634754d53086ff0cf6fc2441ac774b9673b65f28672851b6360c88d478d51fb92d0f5fbffd0e2619a3786acb99e2fa16405f45d5b32ee9a5997b4740d709b844ac64f068571157156e48d4b26c68f858012ffa4fc5a232d081b09cbc69a8ce6a27661cefc54d0c785b7d2c63ff881e0051a26394e0b33222c7499958f89adc1d28b62dda18feb1aead2906e44116c4e025105b0da79954e5261617b6eb9a6d3ff8ca6d75f6dbf1cb261a55a802fd60fbea32aad05ab4e4ae65c637dab1053f1f3503d58d6650edee6dadee9ab4d9cb7a56d3c5ed5eb1bc3a7585caeb2affdb3f0f17c533e708af36537a25db82e58a1c52ff6312608f52a7c78bfaf1998b96bc5b1f91521f5e1f102f5036c5b2315d6a5ab854b45a5ba9adbda7508ce4566cfb3c8824acf0c73a9bed788e96d7e44888229263203e50e4c9f500d6b65a6030fd8938f59520211edd67bd34bb2a0c625fe0c8f01f953bcd3cadf0ef77e5ad621df6d41aaee720706d5ea51efc98a8c2a061320cf6f84e83794d448009cbaa81741b96392a7a9200d1f4cab636a6dedd2da184f579982b41451f3649d12505edcae97c1ebe64c191f33928c3f4c98b6b5186c5a6c2d93ead438f3fae2057e7d4aa3e45cfd5e57fb32092b19e10cb4b1c8d84c139811f47201fbd48240aa01ef92f0d9fdd19290c66442f18afba90045e5b8c4e37699c0dd7b6699d223dfd3d3cd40d2286308af861d6e847173e96a0ea4b6eb9e50b637b90ee3d2076def70fb40b5a1d6bb7c1382dd259c55ab8c3833fc29b4b510f73b6e9bb8563e61f48bd0ba8e9b8d434edadfb423c3b0d4eaa2af9b1665bfc2d5bff2d53ece364923901d6c5a7359d20a59548c338d1319cef3144d6d356fd81d739d6a679e77996d1b761efafc0f10a051f6726f2b81019ebc6c0c1d4606bec586338994c3c0b8e405f228a9292ed4c8bef40af8df3e9b63a1e5deff9e4cbe461979213a3d6e42d9c98f693b8a2b56c10e6b709c1bca2aea975e7254ca2d9b08818a17a692c0997aaa8684443b29b527fd1f6ce49c42c652164ff1f4069ac84b37ef28c5a47cf9a55fe445626fac42d458ed9fed1be45243b5d382607b8f2e0e56fa6c79d1f21c943d6bf204e43474c5c5169fe9c2bba2bb7c3890bde1f0aca697d72a35724b085b79ec34ed9617e391823ed3d36ab3e6904d3da5ea84dca34c44055c2ce362ca7d940e655d0f8ae1b8b7a105da423a817c3976c317dfce9f87b4e42066b885d15f35b2d805ef702ed4911d4c41e087d507b1a40848212e12f5ae9e85d26c86f6a791cc349fac9f68c0d77419f5780f7369aa2bf035282b18288582ceea07d6bce639c3c54c41492b304d105f1b8c1d27cd55f3858c5c499aeba935f044d41c66e582aea02bc85cc534388e996451f62b07588d609c8392b337dc01716059295526b0e2ee99b5f27114644712cb51e3b9926c150cb1ccdbd9e6bf2d1683d7fdf9d0b0f07776bd68dd760998f38793b2fed155f6344e187c567947d702646c0365b4ab1f396abbc3933d6d0c2a2bb07de418916fa509d11cb1b46f0da56da58e93ba641a8e7802f7e552c26173e0ae675c347c48b540fb60311971b684d7e1a029f2678a2c64ee9b4aa31a8219ccbc5402199321ec8cbb00776a433cc5a270527c60e86c32a3c5647cfdd552b25983417199473cd29a5f6f7518b3bcb2e82bb13303771686638f0a25717d01b64c0d21a5affa7730faac1966aecdb777ed83157a434374fe818b7cf9fcd22b951bd5e5ab23418ebbe63277225b77b2236d350ada2109812689cb685b623be70a50aee49cf71c8fd28cd674388a9d9581402994bd8311d54086ed239cd8423fb9224e02e8812f3345319458615ef0214f96482d2d9957da3a7f67cd945388b4bb9ea732657bf49d133ff5740ecb1c95c1de98ba23440ce6d204a613e10a91feeab15207d2499df67af9f731063c4d3eeb45d2bafb89907e4da9857036062001a04793946ba62b08481e659b31d28a44b79c07c4af8bf5c80f7294ae9209992700305666e2c9ae8e56c77068b0c0f3318f95bc4dbf15a7bc89e21531282cb9b986f512bd3d7c8a4a3e56321e81ea65ad787ed1de80db52c28d206adafe07bc09f96875682d2bf75bbd1fafae62988b67fe01a2cc9d3cef862e68859b3809df81b79b7ca864844cf9b65ea4d380d0f4fad112375bdad6cad1cc13d601a485aaecb11d6d51521386a751acd0880f460e32749d4eb4e86b3fdf6f0d9e698c99ed9995a19c73348616b876ce021b0570550a1504c7fc69166ee336c922769873123f5113b2524c9f5909989ed07ffaa027b882c2bf4bd8933a057d3862c4a70fd540b67f08d18c417fd4cc6615ebe98ddd32661c5af94906c55472f3d208d8aedea4607809fbed40fbaac1e09f565301074e84b5befa2146d42cf659bf55bb733277122dfd08723b6e5d0d8542564a99e34e9168a54cbf9506a6bf2cf17cc19c7c7f6a34c2d3f8140d4f5f4820e235313481bc79baf1c9059839ff72842c9c47fb4db171432455d469c2107dc7faa3fbc68269e35cafbbebaad36d4558da550de2bb36de33dcfbd55dfbdc783d4cb0723d22da4", 0x1000}, {&(0x7f0000002240)="4a5887528ed19ca74e161a35e5a72e9d839f9fbb5a184c0c4f45c10f6cabc76943e074d3232266d8d31676f6ac3f954f385a641701d4d6b013618a37f7ab87fe56e64999075c27d584cdfe0eac0c597dd07d68f470190c423a73124e70eac267ad42bba542433ba3f723298d10d4ec0753da3d8947877e0d3f", 0x79}, {&(0x7f0000000180)="309223d3ffa27c", 0x7}, {&(0x7f00000022c0)="47050f4fff1ffd6bd9133bf4d5f26fd8ab59208b21dbcf4e8f89212a9bc0692f5886c7a9b839624fd00e2ea9d4ec524b8235f4be1340b7209726ffddc1cc1f3f6c2ebde5844b202d09dbb6793fef17feb34fd9f797ae37dbf0249fd90f3b435bee0276db54d778c908a1c3635d939af63dac4cabb6b2a08bcb4b85ea7db1c3", 0x7f}, {&(0x7f0000002340)="46c8c268b5fac50138bf13594d88b8c52f0495fa501170016b7b018543b3cccda948603ac6373210ae137cd9be715b73e723c3881921fc42bbe677265462ef1e0bc12c9b0eccc1a836c05c64660fdc1c3568f547e2975be030cd7359ce57b1d6e1130d6c67371d0bc919c9278564f393a948c579d9909a7e6e410daa1c6ef1063e62495c4356b7ecc88f3b05c8fe7ff2088ad72b4bf2286247dc4ba9789c231b57759688cc5d6654a11e766122c7eef0639acf19", 0xb4}], 0x6) [ 414.175997] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 414.183250] FAT-fs (loop3): Filesystem has been set read-only 14:22:03 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x100000000000006d, 0x0) 14:22:03 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x280004, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000002840)={0xffffffffffffffff}) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000002880)={'filter\x00'}, &(0x7f0000002900)=0x54) 14:22:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 414.295998] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) 14:22:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc0045878, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:03 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:03 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x7, 0xfffffffffffffffa, 0xef11, 0x6, 0x0, 0xfff, 0x8010, 0x2, 0x10001, 0x400, 0x8, 0x61e, 0xa21, 0x101, 0x0, 0x20, 0x4, 0x4, 0x9, 0x3, 0x1, 0x1, 0x4, 0x2, 0x1, 0x0, 0x1, 0x9ce, 0x7fffffff, 0x30, 0x0, 0x3, 0x0, 0x18, 0x2570, 0x5, 0x0, 0x0, 0x0, @perf_bp, 0x2, 0x8, 0x3, 0x19c9e8a90d735668, 0x6, 0x3f, 0x1}, r0, 0xa, r1, 0x0) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:22:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x6000) 14:22:03 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x100000000000014c, 0x0) 14:22:03 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x4, 0x40, 0x9, {0x0, 0x1c9c380}, 0x85e5, 0x3f}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:22:03 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) msgget$private(0x0, 0x40) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:22:03 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x6c00) 14:22:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xaea2, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:03 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4004ae86, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:03 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000182, 0x0) 14:22:03 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x800000000005, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:22:03 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x10000000000002d8, 0x0) [ 414.860336] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 414.867601] FAT-fs (loop3): Filesystem has been set read-only 14:22:03 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:22:03 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:03 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4004ae86, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 414.962188] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) 14:22:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xaea3, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0xfffffff5) 14:22:03 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x100, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x8) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x1, 0x83}) 14:22:03 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000150, 0x0) [ 415.212526] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 415.219783] FAT-fs (loop3): Filesystem has been set read-only [ 415.302371] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) 14:22:04 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80080, 0x0) r3 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r3, &(0x7f00000001c0)='big_key\x00', &(0x7f0000000240)='/dev/rtc0\x00') write$input_event(r2, &(0x7f0000000040)={{}, 0x0, 0x8, 0x10000}, 0x18) read$eventfd(r2, &(0x7f0000000080), 0x8) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000280)={0x7, {0x2, 0x4e24, @rand_addr=0x7f}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @loopback}, 0x1, 0x0, 0x0, 0x7, 0x4, 0x0, 0x2, 0x8, 0x6}) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) getpgid(r1) 14:22:04 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:04 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4004ae86, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:04 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000201, 0x0) 14:22:04 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x7ffffb, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x1, [@broadcast]}) 14:22:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0xc006000000000000) 14:22:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x2, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:04 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() rt_sigqueueinfo(r0, 0x38, &(0x7f0000000000)={0x19, 0x5, 0xffff, 0x74f}) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) [ 415.508137] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 415.515406] FAT-fs (loop3): Filesystem has been set read-only 14:22:04 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x40, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, r0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2202, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000080)={0xa, 0xa, 0x6, 0x9}, 0xa) 14:22:04 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000028, 0x0) 14:22:04 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:04 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4004ae86, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x5000aea5, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x900000000000000) 14:22:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) read(r0, &(0x7f0000000040)=""/185, 0xb9) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) 14:22:04 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000215, 0x0) [ 415.899082] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 415.906367] FAT-fs (loop3): Filesystem has been set read-only [ 416.016108] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) 14:22:04 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffff7, 0x8000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000040)=""/99) r2 = getpid() socket$pptp(0x18, 0x1, 0x2) sched_setscheduler(r2, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:22:04 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:04 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4004ae86, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:04 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x9, &(0x7f0000002580)=[{&(0x7f00000000c0)="7d431e171475d6bcee507a81ea171d70edfacf1e71648bc02f2725299e32c5bf7a71114e4729558b480d0bc46ef7f9c7147120351dfdc20ed1165b2e4518a07b8dd92d95f503980df0f9c8a1d0e9dd1e877c", 0x52, 0xa5}, {&(0x7f0000000140)="6f33e2ec8ee762a4e04b", 0xa, 0xffff}, {&(0x7f0000000200)="902313ed82602d3247b6d673ed5d7187dbfcaef833fa6194757bb4392b3bb22f6d7e30fdbddcaabb007b50fb725cf33224d9f833d402f3e04b09d9c74abe74f09cf15379c48465ed1600b3f5cd8da5bcc8dcb537584838", 0x57, 0x1}, {&(0x7f0000000280)="e7405c4e67cd104f1cda9bc41540a43fa7f2822a90fd7358a44c42bc0097b0f1397e78ce86ab184aadde10cf230661f0acd6fafe56e052b90f70f9ee2bc2acd2b2014626dadd6a93f924b207838e34f2052ad308602e665d736d7a969a7540330cedad9dd28eb1b787e6d3aa367f20c229f838ba552e77aaf449aa58549a42c2d2320a1f2333fce6aaee", 0x8a, 0x2}, {&(0x7f0000000340)="69749a55f34d5980c67c496baaa0ac179825f02eeb246f002005e26b70be90d78aaad72ba81c4880e71e25c704beb7a587e1c55377ee34b3aa02accbcf5496a82adbb0c3a21b8c18e24d63c03a95bce3f28976b00c478cd09dbb5b47dc9ead27f9ff4b079fe96bc3bb10edacaed3c46a228c49f80d3e1f4092e9331cafadf1ce4fe1b499c137d51dd7622bc2f7357892f73714", 0x93, 0x2}, {&(0x7f0000000580)="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", 0x1000, 0x9}, {&(0x7f0000000400)="47fb28c6ee4c4f8c0468172e296f5afbb3a10faca8a6f8466f3a70df0b830da68a829cb446d0e04ccc5682cc364d516e4f373777365f1047734a34eaa1df6c460aa51d067c274f403a86f8a64918f72da3dffa14d53931165311432dfd9139a1d4141e7525b0b669b2ed14c11648af19ec804a68ae4016e3a36e58e6750fb1a6631c45d0b52977564b78a24970bff409ecaf7115f39123c4d300b0a211fcd80aa9c65ce736e8780fc0260c7e955006f22ccb4e36a4bd5795d2f8b5ef7d44c6f8018919d0ce60baba818dc17d", 0xcc, 0x1000}, {&(0x7f0000001580)="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", 0x1000, 0x8}, {&(0x7f0000000500)="1499810086f986985fe0672b4fc81d594933a67174164fa39f23337f", 0x1c, 0x4}], 0x8004, &(0x7f0000002680)={[{@nossd_spread='nossd_spread'}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x8000}}]}) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) timerfd_create(0x1, 0x80000) 14:22:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae90, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:04 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x10000000000001e8, 0x0) 14:22:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x1f00) 14:22:04 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x80000003) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:22:05 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=r0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) [ 416.257649] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 416.266516] FAT-fs (loop3): Filesystem has been set read-only 14:22:05 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 416.376887] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) 14:22:05 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4004ae86, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:05 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x515040, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x4) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) 14:22:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:05 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x1000000000000070, 0x0) 14:22:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x7400) 14:22:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 416.675541] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 416.682803] FAT-fs (loop3): Filesystem has been set read-only [ 416.798616] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) 14:22:05 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x4000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() mount$9p_xen(&(0x7f0000000000)='&posix_acl_access-cpuset\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x42000, &(0x7f0000000180)={'trans=xen,', {[{@debug={'debug', 0x3d, 0x6}}, {@uname={'uname', 0x3d, '^%vboxnet1'}}, {@cache_mmap='cache=mmap'}, {@fscache='fscache'}, {@loose='loose'}]}}) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r0}, 0x10) 14:22:05 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4004ae86, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x40087602, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:05 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x100000000000007c, 0x0) 14:22:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:05 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000580)=""/4096, 0x1000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101901, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000200)={'nat\x00', 0x0, 0x4, 0x2b, [], 0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], &(0x7f0000000140)=""/43}, &(0x7f0000000280)=0x78) 14:22:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0xf00) 14:22:05 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:22:05 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() getpid() r1 = memfd_create(&(0x7f0000000000)='loeth0\'lo\x00', 0x3) fcntl$setown(r1, 0x8, r0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000140), 0x10) 14:22:05 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0045878, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0xab48) 14:22:05 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4004ae86, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) 14:22:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 417.073089] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) [ 417.080362] FAT-fs (loop3): Filesystem has been set read-only 14:22:05 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x10000000000000f7, 0x0) 14:22:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4080aebf, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) [ 417.218831] FAT-fs (loop3): error, invalid access to FAT (entry 0x000006c0) 14:22:06 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@ethernet={0x0, @local}, &(0x7f0000000100)=0x80) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000200)=0x4) 14:22:06 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000100), 0x10000000000001b6, 0x0) [ 417.410721] list_add corruption. next->prev should be prev (ffff8801db01d130), but was dead000000000200. (next=ffff8801868bda60). [ 417.423013] ------------[ cut here ]------------ [ 417.427784] kernel BUG at lib/list_debug.c:25! [ 417.432387] invalid opcode: 0000 [#1] SMP KASAN [ 417.437061] CPU: 0 PID: 24500 Comm: syz-executor0 Not tainted 4.19.0-rc2+ #3 [ 417.444246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.453621] RIP: 0010:__list_add_valid.cold.0+0xf/0x25 [ 417.458907] Code: e8 73 d5 46 fe e9 68 ff ff ff e8 69 d5 46 fe eb c9 4c 89 e7 e8 5f d5 46 fe eb 97 48 89 d9 48 c7 c7 60 6c 5d 87 e8 92 ad ee fd <0f> 0b 48 89 f1 48 c7 c7 20 6d 5d 87 48 89 de e8 7e ad ee fd 0f 0b [ 417.477819] RSP: 0018:ffff88015573ed98 EFLAGS: 00010086 [ 417.483196] RAX: 0000000000000075 RBX: ffff8801868bda60 RCX: ffffc900046fc000 [ 417.490472] RDX: 0000000000000000 RSI: ffffffff8163ba81 RDI: 0000000000000001 [ 417.497746] RBP: ffff88015573edb0 R08: ffff88018dada780 R09: ffffed003b605010 [ 417.505333] R10: ffffed003b605010 R11: ffff8801db028087 R12: ffff8801868bda60 [ 417.512606] R13: ffff8801868b82c0 R14: ffff8801868bda60 R15: ffff8801db01d130 [ 417.519885] FS: 00007f7873f9b700(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 417.528114] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.533997] CR2: 0000000000a58f30 CR3: 000000018514a000 CR4: 00000000001426f0 [ 417.541275] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 417.548551] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 417.555821] Call Trace: [ 417.558426] vmx_vcpu_load+0x205/0xfe0 [ 417.562329] ? handle_dr+0x8c0/0x8c0 [ 417.566048] ? print_usage_bug+0xc0/0xc0 [ 417.570119] ? handle_dr+0x8c0/0x8c0 [ 417.573849] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 417.579395] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 417.584430] ? __lock_acquire+0x7fc/0x5020 [ 417.588705] kvm_arch_vcpu_load+0x22b/0x940 [ 417.593041] ? kvm_arch_dev_ioctl+0x610/0x610 [ 417.597539] ? mark_held_locks+0x160/0x160 [ 417.601784] ? kvm_arch_dev_ioctl+0x610/0x610 [ 417.606293] vcpu_load+0x32/0x40 [ 417.609707] kvm_arch_vcpu_ioctl+0x1d6/0x3ac0 [ 417.614296] ? __lock_acquire+0x7fc/0x5020 [ 417.618534] ? kvm_sched_in+0x82/0xa0 [ 417.622364] ? kvm_arch_vcpu_put+0x420/0x420 [ 417.626800] ? mark_held_locks+0x160/0x160 [ 417.631039] ? __switch_to_asm+0x34/0x70 [ 417.635104] ? __switch_to_asm+0x34/0x70 [ 417.639164] ? __switch_to_asm+0x40/0x70 [ 417.643223] ? __switch_to_asm+0x34/0x70 [ 417.647284] ? __switch_to_asm+0x40/0x70 [ 417.651346] ? __switch_to_asm+0x34/0x70 [ 417.655406] ? __switch_to_asm+0x40/0x70 [ 417.659495] ? graph_lock+0x170/0x170 [ 417.663298] ? __schedule+0x884/0x1df0 [ 417.667197] ? __sched_text_start+0x8/0x8 [ 417.671356] ? find_held_lock+0x36/0x1c0 [ 417.675432] ? lock_downgrade+0x8f0/0x8f0 [ 417.679589] ? kasan_check_read+0x11/0x20 [ 417.683742] ? rcu_is_watching+0x8c/0x150 [ 417.687892] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 417.692572] ? kasan_check_write+0x14/0x20 [ 417.696810] ? osq_unlock+0x9f/0x310 [ 417.700525] ? osq_lock+0xd80/0xd80 [ 417.704151] ? lock_acquire+0x1e4/0x4f0 [ 417.708135] ? kasan_check_read+0x11/0x20 [ 417.712283] ? rcu_is_watching+0x8c/0x150 [ 417.716435] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 417.721122] ? __mutex_lock+0x12a5/0x1700 [ 417.725276] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 417.730820] ? kvm_vcpu_ioctl+0x1ea/0x1280 [ 417.735058] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 417.740086] ? mutex_trylock+0x2b0/0x2b0 [ 417.744152] ? futex_wake+0x760/0x760 [ 417.747959] ? __lock_acquire+0x7fc/0x5020 [ 417.752198] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 417.757304] ? futex_wait+0x5d2/0xa20 [ 417.761123] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 417.766322] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 417.771427] ? futex_wake+0x304/0x760 [ 417.775237] ? kvm_set_memory_region+0x50/0x50 [ 417.779834] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 417.784962] kvm_vcpu_ioctl+0x286/0x1280 [ 417.789031] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 417.794748] ? find_held_lock+0x36/0x1c0 [ 417.798824] ? lock_downgrade+0x8f0/0x8f0 [ 417.802984] ? kasan_check_read+0x11/0x20 [ 417.807134] ? rcu_is_watching+0x8c/0x150 [ 417.811288] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 417.815973] ? __fget+0x4d5/0x740 [ 417.819439] ? ksys_dup3+0x690/0x690 [ 417.823158] ? find_held_lock+0x36/0x1c0 [ 417.827230] ? __do_page_fault+0x620/0xe50 [ 417.831474] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 417.837189] do_vfs_ioctl+0x1de/0x1720 [ 417.841083] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 417.846279] ? ioctl_preallocate+0x300/0x300 [ 417.850703] ? selinux_capable+0x40/0x40 [ 417.854784] ? __x64_sys_futex+0x47f/0x6a0 [ 417.859025] ? do_syscall_64+0x9a/0x820 [ 417.863009] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 417.868551] ? security_file_ioctl+0x94/0xc0 [ 417.872969] ksys_ioctl+0xa9/0xd0 [ 417.876431] __x64_sys_ioctl+0x73/0xb0 [ 417.880327] do_syscall_64+0x1b9/0x820 [ 417.884218] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 417.889589] ? syscall_return_slowpath+0x5e0/0x5e0 [ 417.894519] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 417.899364] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 417.904384] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 417.909406] ? prepare_exit_to_usermode+0x291/0x3b0 [ 417.914434] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 417.919290] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 417.924479] RIP: 0033:0x457099 [ 417.927692] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 417.946601] RSP: 002b:00007f7873f9ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.954318] RAX: ffffffffffffffda RBX: 00007f7873f9b6d4 RCX: 0000000000457099 [ 417.961587] RDX: 00000000200001c0 RSI: 000000004080aebf RDI: 0000000000000007 [ 417.968854] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 [ 417.976125] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 417.983394] R13: 00000000004cf358 R14: 00000000004c5622 R15: 0000000000000001 [ 417.990688] Modules linked in: [ 417.993890] Dumping ftrace buffer: [ 417.997425] (ftrace buffer empty) [ 418.001169] ---[ end trace e492f69f3d83196d ]--- [ 418.005938] RIP: 0010:__list_add_valid.cold.0+0xf/0x25 [ 418.011216] Code: e8 73 d5 46 fe e9 68 ff ff ff e8 69 d5 46 fe eb c9 4c 89 e7 e8 5f d5 46 fe eb 97 48 89 d9 48 c7 c7 60 6c 5d 87 e8 92 ad ee fd <0f> 0b 48 89 f1 48 c7 c7 20 6d 5d 87 48 89 de e8 7e ad ee fd 0f 0b [ 418.030120] RSP: 0018:ffff88015573ed98 EFLAGS: 00010086 [ 418.035488] RAX: 0000000000000075 RBX: ffff8801868bda60 RCX: ffffc900046fc000 [ 418.042758] RDX: 0000000000000000 RSI: ffffffff8163ba81 RDI: 0000000000000001 [ 418.050030] RBP: ffff88015573edb0 R08: ffff88018dada780 R09: ffffed003b605010 [ 418.057299] R10: ffffed003b605010 R11: ffff8801db028087 R12: ffff8801868bda60 [ 418.064569] R13: ffff8801868b82c0 R14: ffff8801868bda60 R15: ffff8801db01d130 [ 418.071842] FS: 00007f7873f9b700(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 418.080065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.085949] CR2: 0000000000a58f30 CR3: 000000018514a000 CR4: 00000000001426f0 [ 418.093239] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 418.100509] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 418.107798] Kernel panic - not syncing: Fatal exception [ 418.113494] Dumping ftrace buffer: [ 418.117024] (ftrace buffer empty) [ 418.120718] Kernel Offset: disabled [ 418.124334] Rebooting in 86400 seconds..