tl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:18 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00'}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1683.665246][T16222] binder: 16219:16222 ioctl c0306201 20000200 returned -14
10:06:18 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x2)
r1 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r2 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1726f4dc89fff731, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r2}], 0x29d, 0x0, 0x0})

10:06:18 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
ioctl$USBDEVFS_RESET(r3, 0x5514)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000140)=0x9)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x3)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:18 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r1=>0x0, 0xfffc, 0x7f, 0xfffffffe, 0x9, 0x40009}, &(0x7f0000000040)=0x14)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r1, 0x3, 0x18, "c982dba5d989462d499e355ffc8efbded493f5a1601d6d71"}, 0x20)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r2 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x280000)
ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000100)=0x3)

[ 1683.819316][T16275] binder: 16254:16275 unknown command 0
[ 1683.825410][T16275] binder: 16254:16275 ioctl c0306201 20000200 returned -22
10:06:18 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00'}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:19 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x140068}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x2, 0x6, 0x2, 0x70bd2c, 0x25dfdbfc, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc09b}, 0x4000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f01fa9a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x4f}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000480)={0x9a0000, 0x6, 0x80000001, <r5=>0xffffffffffffffff, 0x0, &(0x7f0000000440)={0xd40d88, 0x4, [], @value=0x5}})
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, 0xffffffffffffffff, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000003c0)={0xfffffe01, 0x8, 0x4, 0x10, 0x80, {0x77359400}, {0x5, 0x1, 0x3, 0x2, 0xd6, 0x40, "aef0c1ee"}, 0xffffffff, 0x3, @userptr=0x7, 0x7})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-monitor\x00', 0x4000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$TIOCGWINSZ(r9, 0x5413, &(0x7f0000000040))
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = fcntl$dupfd(r10, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
setsockopt$packet_buf(r7, 0x107, 0x5, &(0x7f00000002c0)="6ad9cb82c95b45f14a331ee1e3a55b1e1b918e3f49ce081fdd842196282db14fe4281d7e6014768e4d65b0251b603e8c0fbfc0a132f7fe50f06ac1eabbf453a58722ad2ae071ca666c63a4eaf150fce48c60d6b7e8c3e24fb394e529e2d4be5db0c188159e805cccc7c200e48a951de58fa1f54556a53ced85301f8686047fa584cac3c4b06b8b9cd4cc82f24feede5440858f9d008c70387fa03c966b10b51f50175351ef51d942bfb92b3219fbb4cdbfdb613f59b5d9d0b5d773dc9124470060a484d1780eb7874dd9caac0b9917acd1ca06c7a07ab971c251be87a8a940fdfa3513cb", 0xe4)
write$FUSE_INTERRUPT(r11, &(0x7f0000000500)={0x10, 0x0, 0x6}, 0x10)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r6, 0xae80, 0x0)

10:06:19 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x5)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x181800)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x4000, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000040)=0x5060)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0x3}, 0x1)

10:06:19 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1684.232683][T16383] binder: 16376:16383 ioctl c0306201 20000200 returned -14
10:06:19 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x3c)
ptrace$cont(0x18, r4, 0x0, 0x0)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r4, 0x0, 0x0)
ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000240)=r4)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r7, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000200)={'bridge0\x00', &(0x7f0000000140)=@ethtool_coalesce={0xe, 0x10001, 0xea13, 0x1, 0x2, 0x7f1, 0x52, 0x8, 0x3, 0xe08d, 0x8, 0xff, 0x0, 0x10000, 0x6, 0x800, 0x0, 0x1, 0x4, 0x8000, 0x100, 0x6, 0x7}})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:19 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0563044000000008"], 0xffffffffffffffc3, 0x0, 0x0})

10:06:19 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00'}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:19 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x7fff)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x20)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x9)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x52)

10:06:19 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r5, 0x3)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1684.646174][T16463] binder: 16460:16463 ioctl c0306201 20000200 returned -14
10:06:19 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1684.806265][T16473] binder: 16470:16473 ioctl c0306201 20000200 returned -14
10:06:19 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=[@acquire], 0xffffffffffffffc3, 0x0, 0x0})

10:06:20 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, 0x0, 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:20 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
getsockopt$inet_tcp_buf(r4, 0x6, 0x1c, &(0x7f0000000000)=""/182, &(0x7f00000000c0)=0xb6)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x6)
io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0)

[ 1685.033060][T16485] binder: 16481:16485 ioctl c0306201 20000200 returned -14
10:06:20 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0, 0xffffffffffffff94}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r3)
r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8)
keyctl$instantiate(0xc, r3, 0x0, 0x0, r4)
r5 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000440)={0x6, &(0x7f0000000400)=[{0xfff, 0x100}, {0x3, 0xf800}, {0x3, 0xffff}, {0x0, 0x7ff}, {0x5, 0x4}, {0x20, 0x1}]})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000240)={0xe, {0x7, 0x400, 0x2, 0xffffffff}})
r8 = syz_open_dev$vcsu(&(0x7f00000002c0)='/dev/vcsu#\x00', 0x5, 0x15c63843bc4f8726)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x40, r10, 0x376afc4d28abb293, 0x0, 0x0, {{}, {}, {0x24, 0x17, {0x40000000, 0x0, @l2={'eth', 0x3a, '\x00'}}}}}, 0x40}}, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r10, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x3a2546d9b5babe1b)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:20 executing program 0:
syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xa5efca92778cff6b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x262, 0x0, &(0x7f00000000c0)=[@acquire], 0x0, 0x0, 0x0})

10:06:20 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xc27)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0xc60ad8bc21bc9b50, 0x0)
ioctl$ASHMEM_GET_NAME(r7, 0x81007702, &(0x7f00000002c0)=""/155)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:20 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1685.336229][T16497] binder: 16494:16497 ioctl c0306201 20000200 returned -14
10:06:20 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x9)
semop(0x0, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1)
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
semop(0x0, &(0x7f0000000040)=[{0x0, 0xb3f6}, {0x1, 0x1ea}, {0x1}], 0x3)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000040)={0xfffffffe, 0x0, 0x5})
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x40, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000180))
ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x100, 0x1, 0x1c, &(0x7f0000ffe000/0x1000)=nil, 0x3})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000001c0)=0x8, 0x4)
ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f00000000c0)=""/191)

10:06:20 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, 0x0, 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:20 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x6}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x4000, 0x0)
openat(r3, &(0x7f0000000200)='./bus\x00', 0x688800, 0x36)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1685.819096][T16592] binder: 16578:16592 ioctl c0306201 20000200 returned -14
10:06:20 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000540))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x2, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000380)={0xd0, "db26faf7804572136d25bd9d95f16bb200c2b7e39157d5f273a056ae335084a0709d130b9dd9f5131753a6f5aa9c701544580cde98b5d3f29388dad265712e7d33ab916ce4966261e4bbf5b861a62c3476b37882dc3500a3fc3d662d2761a688c30e03d8458c4be2fb6ed160dc9203195e8e1e04d01445ea49ba4fb98201118d5a0bde0ee6cb1f663d396e08ba466a7a4c0ea99e568e48cbf8a3714b7c6b33c251557f7f8ec9685bcf0b062caf2bfb0e962c1a6a2b08f10c554dc7b9f91fda0874c5f5a9e1f0619231046f805fa99ba8"})
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x1)
fcntl$dupfd(r3, 0x0, r3)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
write$binfmt_script(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="2321202e2f62757320766274786e6574370ad09b23ce11dba8e3a194ea411ce6fba773d572903415e958eafc6916a66599def35b7bb087964e57f984bdc8e85cf3d8ace4fc7816f2a6a635c4beae49cf0766562645805ef6b92863c4d8448c90a4de694fa02096705df2cf1a84ce131aff28c8cb26d463babc918a01b4440167862e8e344f27a87e3acdb1ad2b037706d95e0caa4ce06720c603fc3e5680f1c155fb0d7ff369cfff412b6ac42815a6060000"], 0xffffffffffffffaf)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r8, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000140)=0x9, 0x4)

10:06:21 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, 0x0, 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:21 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f00000000c0)=[@acquire], 0x0, 0x0, 0x0})

10:06:21 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
setrlimit(0xe, &(0x7f0000000140)={0x5, 0x7})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

10:06:21 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1686.429492][T16745] binder: 16743:16745 ioctl c0306201 20000200 returned -14
10:06:21 executing program 0:
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000240)={{0xcd93960f2c714c11, 0x2, 0xf, 0x2, 0x9, 0x7f, 0xfe, 0x0, 0x2, 0xff, 0xc0, 0x6}, {0xda14b642e4028629, 0xb51d12a1dce9b243, 0x0, 0x0, 0x5, 0x4, 0x1, 0xd4, 0x1, 0x8, 0x0, 0x20}, {0x2, 0x10000, 0xa, 0x9, 0x4, 0x5, 0x7, 0x3, 0x9, 0x80, 0x8, 0x20}, {0xf000, 0x3000, 0xa, 0x94, 0xf, 0x6, 0x8, 0x1, 0xc0, 0x0, 0x3, 0x80}, {0x2000, 0x2000, 0x14, 0x0, 0xff, 0x8, 0x80, 0x8, 0x2, 0x2b, 0xfe, 0x6}, {0x2000, 0x0, 0x4, 0x0, 0x2e, 0xb0, 0x5, 0x8, 0x7, 0x1, 0x1f, 0x3}, {0x4, 0x7e4750f5f45989c, 0x4, 0x0, 0x4, 0x80, 0x0, 0x5, 0x32, 0x40, 0x4, 0x6}, {0x2, 0x4, 0x3, 0x81, 0x7f, 0x3, 0x20, 0x3f, 0x0, 0xff, 0x5, 0x2}, {0xb6a7878260017252, 0xd000}, {0x4}, 0x50001, 0x0, 0x5000, 0x12000, 0x3, 0x6100, 0xf000, [0x7ff, 0x100, 0x4, 0x5]})
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0863045f00000000"], 0xffffffffffffffc3, 0x0, 0x0})

10:06:21 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:21 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x2, 0x0)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8d300109}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x188, 0x1, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x458)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x202000, 0x0)
ioctl$IMCTRLREQ(r6, 0x80044945, &(0x7f0000000180)={0x400a, 0x3f, 0x2, 0x100000})
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x4e}], 0x1, 0x0, 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x10000, 0x2, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r10, 0x0, r10)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r9, 0xae80, 0x0)

10:06:21 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', @ifru_settings={0x5, 0x2, @fr_pvc_info=&(0x7f00000000c0)={0x8001, 'veth0_to_hsr\x00'}}})
getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000040)=0x4)

[ 1686.883325][T16811] binder: 16806:16811 ioctl c0306201 20000200 returned -14
10:06:22 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1687.023584][T16856] binder: 16835:16856 ioctl c0306201 20000200 returned -14
10:06:22 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x24000, 0x0)
ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000000c0)=""/154)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xf796213c4f3d0e82, 0x0)
ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x3, 0x4, 0x0, 0x81, 0x1ff, 0x4})

10:06:22 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
time(&(0x7f0000000140))
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:22 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:22 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1687.590856][T17019] binder: 17016:17019 ioctl c0306201 20000200 returned -14
10:06:22 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="056300001b001005"], 0x136, 0x0, 0x0})
syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4, 0x8600)

10:06:22 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x3, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfba, 0x2)
ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000040))
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80, 0x0)
ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000004780)={0x5, 0x1, 0x4, 0x2, 0xb969, {}, {0x4, 0x8, 0x0, 0x7f, 0x7, 0x20, "25f5d263"}, 0x2, 0x2, @userptr=0xe5, 0x1, 0x0, <r4=>r2})
setsockopt$inet_tcp_int(r4, 0x6, 0x1, &(0x7f0000004800)=0xebe4, 0x4)

10:06:22 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000380)=0x80)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a60000009ce80000e0ff000000", @ANYRES32=r4], 0x2}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1, @loopback, 0x5, 0x400, 0x4, 0x180, 0x7f, 0x10, r4})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40002}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r7, 0xae80, 0x0)

10:06:23 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1687.904952][T17029] binder: 17028:17029 ioctl c0306201 20000200 returned -14
10:06:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:23 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x6, 0x3c919f36261e7f2f)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727f0f011424f30f09b805000000b94b0000000f01c1360f06c4c18d72d6830f01caed", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
clock_gettime(0x7, &(0x7f0000000240))
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1688.161627][T17053] binder: 17052:17053 ioctl c0306201 20000200 returned -14
10:06:23 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x6)

10:06:23 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, 0xffffffffffffffff, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:23 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f00000002c0)={0x3, 0x2, 0x1, 'queue0\x00', 0x5})
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1688.590084][T17194] binder: 17166:17194 ioctl c0306201 20000200 returned -14
10:06:23 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x80000)
getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
fstat(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = geteuid()
setreuid(r2, r3)

10:06:23 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630427249bbc00"], 0x4cfa1264fdf99cca, 0x0, 0x0})
rt_sigsuspend(&(0x7f0000000000)={0x5}, 0x8)

10:06:23 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, 0xffffffffffffffff, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:23 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000180)={0x980000, 0x7fffffff, 0x3, <r5=>0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x9a0902, 0xfffffff9, [], @value=0x6a1}})
ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f0000000200)={0xc023, 0x7})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r7, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
setsockopt$inet_icmp_ICMP_FILTER(r7, 0x1, 0x1, &(0x7f0000000240)={0x8}, 0x4)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x2a400, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x40, r10, 0x376afc4d28abb293, 0x0, 0x0, {{}, {}, {0x24, 0x17, {0x40000000, 0x0, @l2={'eth', 0x3a, '\x00'}}}}}, 0x40}}, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(r8, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8048000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r10, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r11 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1688.884815][T17266] binder: 17260:17266 ioctl c0306201 20000200 returned -14
[ 1689.047682][T17290] binder: 17282:17290 ioctl c0306201 20000200 returned -14
10:06:24 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x100000001)
r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xa4, 0x400000)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4080002}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xca8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x33}}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x29}}]}, 0x34}, 0x1, 0x0, 0x0, 0x7b171eb7531bba78}, 0x20008000)

10:06:24 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:24 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, 0xffffffffffffffff, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:24 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a60000009ce80000e0ff000000", @ANYRES32=r5], 0x2}}, 0x0)
bind$can_raw(r3, &(0x7f0000000140)={0x1d, r5}, 0x10)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:24 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)

10:06:24 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630a4000000000"], 0xffffffffffffffc3, 0x0, 0x0})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000240)={{0x4, 0x5, 0x16, 0x80, '\x00', 0x200}, 0x1, [0x4, 0x401, 0x20, 0x401, 0x9, 0x6, 0xffffffffffff35ea, 0x8, 0x80000000, 0x3, 0x7fffffff, 0x3, 0x800, 0xff, 0x40, 0x1, 0x8001, 0x2, 0x8, 0x3, 0xff, 0x8000, 0x5, 0x80000000, 0x3, 0x9, 0x1, 0x411c, 0x8, 0x8, 0x1, 0xfffffffffffffffc, 0x8, 0x703, 0x5, 0xd98, 0x9, 0x2, 0x0, 0x0, 0x1, 0x0, 0x81, 0x7fffffff, 0xfffffffffffffff7, 0x9, 0xff, 0x3, 0x4, 0x1f, 0x400, 0x1, 0x401, 0xa18, 0x3, 0x5b, 0xd63, 0x10001, 0x3ff, 0x6, 0xfffffffffffffffc, 0x5, 0x2, 0x6, 0x0, 0x1000, 0x9, 0x0, 0x71, 0x7, 0x8, 0x1, 0xfffffffffffffffd, 0x4, 0x0, 0x4, 0xffffffff00000000, 0x0, 0x0, 0x80, 0x3ff, 0xeab, 0x1, 0x401, 0x36, 0x3ff, 0x8, 0x2, 0x1, 0x3, 0x5, 0xfffffffffffffffe, 0x5, 0x6, 0x100, 0x9, 0x6, 0x0, 0x9, 0x1000, 0xbcc, 0x7, 0x4, 0x1, 0x318a, 0x4, 0xffff, 0x20, 0x800, 0x8001, 0x3, 0x7c, 0x1f, 0x9c3, 0x1b, 0x6, 0x6, 0x0, 0x1, 0x7fffffff, 0xbd76, 0x101, 0xffff, 0x2, 0x100000001, 0x5, 0x81, 0x2]})

[ 1689.549651][T17427] binder: 17411:17427 ioctl c0306201 20000200 returned -14
10:06:24 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000400)={0x7, 0x7, 0x4, 0x20000, 0x9, {}, {0x3, 0x0, 0x5, 0x24, 0x2, 0x2, "d1a6eaf1"}, 0x358431a4, 0x6, @fd, 0x9, 0x0, <r2=>0xffffffffffffffff})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000380)="640f011bc403010f5a003041240cc481f92f07d9f748b860000000000000000f23d00f21f835000000090f23f80f1be02ed8c066400f3a21bd2d0000000fb8010000000f01c1"}], 0x1, 0x0, 0x0, 0xfffffe26)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f0000000340))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0xfffffbffffffffff, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r7, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000140), 0x4)
fcntl$dupfd(r6, 0x0, r6)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r10 = socket(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r11, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$sock_ifreq(r11, 0x89f0, &(0x7f0000000080)={'ip6erspan0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_REQ_SET_REG(r10, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x18, r12, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}}, 0x800)

10:06:24 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1689.765905][T17488] binder: 17474:17488 ioctl c0306201 20000200 returned -14
10:06:24 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r2}, 0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={r2, @in={{0x2, 0x4e22, @loopback}}, 0x40, 0xffff, 0x6, 0x3, 0x8}, &(0x7f00000000c0)=0x98)

10:06:25 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:25 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0xd8899a81b15e1534)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000000c0)="b5d9631fe1571b78f9a612fdfa61d40a", 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR, @ANYBLOB="d89336fd45c53e4358505eb38d8f0a2e9f03ee9fa01ebe16c42490b63baaeaefc7389d529289989a31ec45eca2007cb9375d75742c7aca3ec8f14ae5d7cc7c92b8a4a84ae27b0db5e90ee626543ed4ec4660afe81aef8381f06e9bc25642f39a0d87f7ebb05f732b4fc7487434c455043efc"], @ANYRES32=r1, @ANYRES32=r2], 0x0, 0x0, 0x0})

[ 1690.047647][T17511] binder: 17510:17511 ioctl c0306201 20000200 returned -14
10:06:25 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
accept$packet(r3, &(0x7f0000000340)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="24004e1ef6dbc893e4e615ae907f6e3003000000000000000000000000d65e02f0ab7210910f413c50e039cca7da493060572ed75e7612a5fe61cbd77afd0ac56e8efdfdb0a99010db14a50eefe7d9dc4f760866f5c803a4d0c3c89d036fdfb498ebc472506bc16b29e873b33cbf74be1c8ad421e05da85b4b7beaa7c598081f597ad77087d599e5eb", @ANYRES32=r6], 0x2}}, 0x0)
getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000004c0)={@initdev, <r8=>0x0}, &(0x7f0000000500)=0x14)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000580)={@initdev, <r9=>0x0}, &(0x7f00000005c0)=0x14)
r10 = socket(0x11, 0x800000003, 0x0)
bind(r10, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r10, &(0x7f0000000040)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a60000009ce80000e0ff000000", @ANYRES32=r11], 0x2}}, 0x0)
r12 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r12, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000600)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8)
sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000b80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000740)={0x3f0, 0x0, 0x851380d07b809f6e, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x1dc, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r7}, {0xd0, 0x2, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x24b, 0x8, 0x20, 0x7f}, {0x7fff, 0x7f, 0x3, 0x7fff}, {0x4, 0x8, 0x81, 0xc5c}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r9}, {0x118, 0x2, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x7fff, 0x0, 0x5, 0x7fff}, {0x30, 0x1, 0x7f, 0xb56}, {0xc22b, 0x40, 0x1}, {0x4, 0x69, 0x7f, 0xfffffffe}, {0x7, 0x0, 0x80, 0x3}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x995}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r13}}}]}}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r14 = socket$inet6_tcp(0xa, 0x1, 0x0)
r15 = fcntl$dupfd(r14, 0x0, r14)
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:25 executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)='selinuxmd5sumself!\x00', &(0x7f00000000c0)='./file0\x00', r2)
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000))

10:06:25 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:25 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:25 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_settings={0x80, 0x7f7, @te1=&(0x7f0000000000)={0x4, 0x6, 0x4, 0x4}}})
r1 = inotify_init()
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$BLKTRACESTART(r2, 0x1274, 0x0)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)

[ 1690.771198][T17636] binder: 17626:17636 ioctl c0306201 20000200 returned -14
10:06:26 executing program 0:
syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00')
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x2)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x800, 0x0)
accept4$unix(r1, &(0x7f0000000180)=@abs, &(0x7f0000000080)=0x6e, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0)
r5 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0x40405515, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000003"], 0xffffffffffffffc3, 0x0, 0x0})

10:06:26 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000140))
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

10:06:26 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:26 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfffffffffffffffe)

10:06:26 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_GET_FP_MODE(0x2e)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x200041, 0x0)
write$UHID_INPUT2(r3, &(0x7f0000000200)={0xc, {0x14, "f1b8304daf6bddc5b85503f29fabe0b3e299cff9"}}, 0x1a)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000140)=0xacdf)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1691.236495][T17757] binder: 17755:17757 ioctl c0306201 20000200 returned -14
10:06:26 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1691.404079][T17765] binder: 17764:17765 ioctl c0306201 20000200 returned -14
10:06:26 executing program 1:
get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x8001, &(0x7f0000002000/0x3000)=nil, 0x2)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)

10:06:26 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:26 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0xad566f220ce6d37}, 0x114, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000002c0)={0x6, {{0xa, 0x4e24, 0x8001, @local, 0x2}}, {{0xa, 0x4e21, 0x7, @remote, 0x7ff}}}, 0x108)
ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000140)={0x0, 0x7})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:26 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
ioctl$int_out(r2, 0x0, &(0x7f0000000180))
fdatasync(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630450001d0080"], 0xffffffffffffffc3, 0x0, 0x0})
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a60000009ce80000e0ff000000", @ANYRES32=r5], 0x2}}, 0x0)
sendto$packet(r3, &(0x7f0000000240)="e2973698ad63e167fdd336a016e7aea8f9f5d385edc59986190ecd9118f0ecd151c4e56a974f4251f59b0e584c71a0f18984695ae1759875d47fb15b0246000c88e38145202ab35c63", 0x49, 0x4008c860, &(0x7f00000001c0)={0x11, 0xfc, r5, 0x1, 0xe3}, 0x14)
fsetxattr$security_ima(r0, &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@ng={0x4, 0x11, "37349a"}, 0x5, 0x2)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
r10 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r10, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f00000002c0)={0x5, 0xb, 0x4, 0x20000, 0x6, {0x77359400}, {0x1, 0x8, 0x2, 0x8, 0x0, 0x81, "aa51334a"}, 0x2, 0x3, @fd=r9, 0x4, 0x0, <r11=>r10})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80)='nl80211\x00')
r14 = socket(0x100000000011, 0x2, 0x0)
bind(r14, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, <r15=>0x0}, &(0x7f0000000340)=0x14)
sendmsg$NL80211_CMD_SET_WIPHY(r12, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="0100000000000000001f0200010008000300ff14b8c93862c254915672d5cd962e6ac0d07a775a0fbf0775e3f37d5698369579c317601f4d75651adc75532205b4e5bde4cb72e647250ef44d81da5c943033215e8e4e059f30124b22127e604f3c80", @ANYRES32=r15, @ANYBLOB], 0x1c}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x30061042}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r13, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xff}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x440}, 0x20000000)

10:06:26 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)
ptrace$getregs(0xc, r0, 0x6, &(0x7f0000000000)=""/180)

[ 1691.909306][T17813] binder: 17801:17813 ioctl c0306201 20000200 returned -14
[ 1691.930193][T17803] binder: 17797:17803 ioctl c0306201 20000200 returned -14
10:06:27 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:27 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3, 0x200000)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000180)=<r6=>0x0)
fcntl$setown(r1, 0x8, r6)
fcntl$dupfd(r5, 0x0, r5)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
write$RDMA_USER_CM_CMD_GET_EVENT(r8, &(0x7f0000000440)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10)
getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000200)=0x61, &(0x7f0000000240)=0x4)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = fcntl$dupfd(r9, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:27 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="365a88ba5c7c2ac7ca7c1face9f208c2", 0x10)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_addrs=@hci={0x1f, 0x9}})
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x2e, @broadcast, 0x4e21, 0x2, 'lc\x00', 0x10, 0x7f, 0x74}, 0x2c)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000040)=0x54)

[ 1692.290862][T17920] binder: 17907:17920 ioctl c0306201 20000200 returned -14
10:06:27 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:27 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00')
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a60000009ce80000e0ff000000", @ANYRES32=r5], 0x2}}, 0x0)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x13080000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x128, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xd5, 0xac, "b64952fb9509b32eb5cfbd1b952edb759a7f480cfd6f2a70b4ab16f37bc7bcd2d9f0f49a408b31298b46e80502978f98ad0bb6a98cb990cfa369a7a88f9b4ce0f11fc108f5d91e542d5247a55310f7435c6bd595ec8c8791ceb4462b2e78f8c82df210fcffd4ecb8d3b566c279b9716035e8f089fadf604d7f6ac9d2aae337785d5915c392d545170e23b2d8d30670eb74139a8c61577c1993dd055eed7f6b9ffa2c4785fe401fd4136f9eb7411e8c7f939f77b867af21edd85139782acec30c9c33e260d1d8f5cf8fda0e90520a75d5db"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xf5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xe0}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5b}]}, 0x128}, 0x1, 0x0, 0x0, 0x10000}, 0x2004c802)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:27 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:27 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x80000001)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c884056304400044658f00"], 0xffffffffffffffc3, 0x0, 0x0})

10:06:27 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x2280, 0xa1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:27 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r2 = socket(0x10, 0x3, 0x0)
finit_module(r2, &(0x7f0000000280)='ip_vti0\x00', 0x0)
ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', r3})
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000009c0800", @ANYRES32=r4], 0x2}}, 0x0)

[ 1692.879851][T18021] binder: 18017:18021 ioctl c0306201 20000200 returned -14
[ 1692.995594][T18033] binder: 18031:18033 ioctl c0306201 20000200 returned -14
10:06:28 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1693.368324][T18115] binder: 18114:18115 ioctl c0306201 20000200 returned -14
10:06:28 executing program 1:
r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8, 0x20000)
write$FUSE_LSEEK(r0, &(0x7f00000000c0)={0x18, 0x0, 0x1, {0x7fff}}, 0x18)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x89, @remote, 0x4e20, 0x0, 'lblcr\x00', 0x13, 0xf0, 0x3e}, 0x2c)

10:06:28 executing program 4:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000200)={0x34, 0x0, &(0x7f0000000180)})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:06:28 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100})
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x3, 0x9, 0x4, 0x20, 0x4, {}, {0x3, 0x2, 0x3, 0x2, 0x4, 0x66, "45e44d4b"}, 0x1, 0x5, @fd=r4, 0x1000, 0x0, <r5=>r2})
ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r6 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0xc0b02)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="215c4803006634829ea62d4321a1"])
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000300)={{0x2000, 0x4, 0xcd7c1240eff96188, 0x7, 0x80, 0x8, 0x2a, 0x6, 0x9, 0x2, 0x84}, {0x6000, 0x10003, 0xe, 0x55, 0x6, 0x3, 0x5, 0x8, 0x16, 0xfe, 0x7, 0x80}, {0xd000, 0x19000, 0x3e, 0x2, 0x0, 0x8, 0xff, 0x0, 0x6, 0x45, 0x12, 0x9}, {0x0, 0x1, 0x8, 0x9b, 0x7f, 0x94, 0x7, 0xd2, 0x80, 0x1, 0x1, 0x8}, {0x1002, 0x4, 0xb, 0x70, 0x2, 0x7f, 0x3f, 0x9, 0x4, 0x1, 0x40, 0xfb}, {0x100000, 0x4000, 0x9, 0x55, 0x80, 0x21, 0x3, 0x1f, 0xdc, 0x0, 0x0, 0x40}, {0x1c004, 0x10d800, 0xe, 0x5, 0x3f, 0x7, 0x2, 0x3, 0x17, 0x3b, 0x5c, 0x7f}, {0x0, 0x100000, 0xa, 0x8, 0x2, 0x3, 0x71, 0x1, 0x1f, 0xe9, 0x7f}, {0x0, 0x3000}, {0x1a000, 0x2000}, 0x0, 0x0, 0x1002, 0x6, 0x3, 0x3900, 0x1000, [0x6b, 0x6, 0x0, 0x4]})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:28 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:28 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=[@acquire], 0xffffffffffffffc3, 0x0, 0x0})
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x480, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000040)='\x18proc\x00', 0x6)

10:06:28 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1693.820391][T18262] Unknown ioctl -1072150264
[ 1693.946259][T18263] binder: 18259:18263 ioctl c0306201 20000200 returned -14
[ 1693.983214][T18268] binder: 18265:18268 ioctl c0306201 20000200 returned -14
10:06:29 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a60000009ce80000e0ff000000", @ANYRES32=r5], 0x2}}, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000000900000600000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0100002001ac0600030000001303000071091b86e759f4d723012b1495237f62eb52c2b4f6fe8b8d9278da9df21a3356e8d80c8812e2449a8e5a690200000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x240088e1)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r6 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, [], @raw_data=[0xfffffff8, 0xfffffffc, 0x1, 0x4, 0x3f, 0x9, 0x0, 0x3, 0x3, 0x80000000, 0x7d4, 0xfffeffff, 0x5, 0x401, 0x6, 0x10000, 0x2, 0x2, 0x7d8, 0x4, 0xa1, 0x9, 0x2, 0x3402, 0x9, 0x44, 0x2, 0xff, 0xffff, 0x7, 0x2, 0x40]})

10:06:29 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x500)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
openat$cgroup_type(r3, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0)

[ 1694.128443][T18262] Unknown ioctl -1072150264
10:06:29 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1694.420117][T18366] binder: 18357:18366 ioctl c0306201 20000200 returned -14
10:06:29 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x8d}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:29 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:29 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x0, [], "47faa9257be3d6b703a06b86cb5e5a5a"})

10:06:29 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1694.914221][T18499] binder: 18496:18499 ioctl c0306201 20000200 returned -14
10:06:30 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=[@acquire], 0xffffffffffffffc3, 0x0, 0x0})
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
socketpair(0x8000000000001e, 0x805, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, <r4=>0x0}, &(0x7f0000000100)=0xc)
keyctl$get_persistent(0xe, r4, 0x0)
socketpair(0x8000000000001e, 0x805, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, <r6=>0x0}, &(0x7f0000000100)=0xc)
keyctl$get_persistent(0xe, r6, 0x0)
r7 = geteuid()
getresgid(&(0x7f00000000c0), &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000140))
lchown(&(0x7f0000000080)='./file0\x00', r7, r8)
r9 = geteuid()
getresgid(&(0x7f00000000c0), &(0x7f0000000100)=<r10=>0x0, &(0x7f0000000140))
lchown(&(0x7f0000000080)='./file0\x00', r9, r10)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
r12 = syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x5, 0x10102)
ioctl$SNDRV_PCM_IOCTL_STATUS32(r12, 0x806c4120, &(0x7f0000000380))
getgroups(0x2, &(0x7f0000000100)=[0xee00, <r13=>0xee01])
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [{0x2, 0x3, r2}, {0x2, 0x3, r4}, {0x2, 0x4, r6}], {0x4, 0x2}, [{0x8, 0x4, r8}, {0x8, 0x3, r10}, {0x8, 0x0, r11}, {0x8, 0x2, 0xee01}, {0x8, 0x3, r13}, {0x8, 0x2, 0xee00}], {0x10, 0x4}, {0x20, 0x4}}, 0x6c, 0x2)

10:06:30 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000040)={0x3, 0x0, {0x0, 0x0, 0x4, 0x401}})

10:06:30 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x203, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:30 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1695.168349][T18509] binder: 18508:18509 ioctl c0306201 20000200 returned -14
10:06:30 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r6, 0x10f, 0x84, &(0x7f0000000180), &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r7, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$sock_inet_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000140))

[ 1695.449775][T18559] binder: 18543:18559 ioctl c0306201 20000200 returned -14
10:06:30 executing program 1:
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$sndseq(r1, &(0x7f00000000c0)=[{0x7, 0x1d, 0x0, 0x5, @time={0x5, 0x1}, {0x8}, {0x1f, 0xcd}, @control={0xfc, 0x7fff, 0x6}}, {0x3, 0x7, 0x3c, 0x8b, @tick=0x8001, {0x6, 0x8}, {0xfa}, @raw8={"972efd65f7da1392f0717fbd"}}, {0x74, 0x81, 0x40, 0x1, @tick=0x5, {0x4, 0x1}, {0x3f}, @quote={{0x4, 0xfe}, 0x9, &(0x7f0000000080)={0x2, 0x8, 0x5, 0x80, @time={0x3f3ce2a2, 0x6}, {0x6}, {0x7, 0x57}, @ext={0x53, &(0x7f0000000000)="a56f984852269d1f814643318a5e4441abc81c470c8a549067fc40293485dcffe972bf68babf10a15328888c33c0c6c65fc9bb2e9e462e69ea1b98a154ab93b270e88992957b7f7f7369f7b5bac91a0e5e7129"}}}}], 0x54)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x80000000c9)

10:06:30 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1695.951682][T18735] binder: 18727:18735 ioctl c0306201 20000200 returned -14
10:06:31 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000040)="9e4b332746a76ca925059e3a6c95a8c2d5a7d5a82ef01c0c146a95c2b5a8be39494bfa25bd30a42eaad5215c80855d03029c85b02cbf28c6748e6d34", 0x3c}, {&(0x7f0000000080)="4b6817f2e91fd273bdbfd2863a3fba68f6b9f25b4f41fc15bd15ae5b187e8f163e5bb44d64bd24743bedd4c4a8724ad5226ad5e1a484cdd2c17ee22abb10418260feedd67dc8e4b4540f2ef5d3ab351d75181c3783041183819502b723ec19de694b6eead593944489ec0632939077c1274160d829c829774717325dc354cea6e79b06b6222314a4637f8923f07c19332c164368b1fbf2a10fcbd83152343ce8adad9d301cee3040ebdead0e3e0f9ff96e67bcd0ce29db271f417d7e65ed9cf9eea2bf7335451339d9fcfbc24ca59f6153a8afed", 0xd4}, {&(0x7f0000000180)="0b8b9ed322680dba79514b7b0f9608e89d9c08e8b7e62923a1a3736787cc441e03172605c2e50bd39a56f47ff5b3eceadaefc1d382dd10499a3d9fecceab9fd6ec882cce800c327bf7d353715b1c28785c9984affe9d51b587c976b7900fac5a77f872fb526e6a9f4f1923780bd77858321265484057d2eea3b8847beec74eb5d5feb6c44d8377a9f82a471e8e0b1976898eae4b549cada5e8dad7aa9b308cc6ee28f6987d2fb6daacc810b26d44c1631c1b37c8c5727d6700c5545e810290c0ff7d2662381ed67c1503381660a10a3d03fb771ca5f17599461b471f67550f33c68585b9af9b347f89c3b526", 0xec}, {&(0x7f0000000280)="403c2fa9bf6826859f6f3a3a6cf38f5ad5a308f52356522ba166b7cc4b031c7751e566b3161bec376e93c636d827a8c41a81804950296a4b8a119eda0aaa52a60b5e97436940377a840f6497e5c1b291cec270de561c53ebf8863888d31315530b7f118eca09eda2da3ecc7b281a8a0c448471031a72b3460fefd01471dd4e3f508821ce9457d2f4c8a352b5a9283796a01ea6a0d37cc0d1a7390bcf76640d9ac17394d13cfe8d3de0a0b21ca36ed0082e349f3d0a64d22bc4e3438f240e59550002dcfdbb40ef798cfd169df156f11193249afe6184d5", 0xd7}, {&(0x7f0000000380)="feb32adb4ae744140eab1c35e353f4f12e1f709a64b38ebe99fd2e40920a5302918932f5fbea54bcb28cb74c3f13f6a6ca238e50c7a84e8754610682bcf52c860b40f08e17a3ff3923921813d26b5ece7dfb34fcff0e1860b13ee56950291f1c406366f515d904055f2e578e380945f9785aaad8d32dce2ba014c2cf2ed37472b2240a1a06c6cba8bf6ca1a2c2f34d4c2fe876610b015e961ee4b03217a71c2b89488bbe2272aae18d59bb019cd7e8b262389b3e216c4367af27917962a68e1e97d1aa5c142270", 0xc7}, {&(0x7f0000000480)="22b08d0a6be4d9f89e2203e4874a9f635149300835b3f32378bf974865c8b84f3ba7b587b38d5afb1f33bab3ccf974d74f2aab8fc9a5208fa9c9ce4a43a68ae23eb957c457b84c7aa1f229ffbc43cbd2f99fad8d4c1e394dae7cb4db3c1c6de451caee37f22ed93c256281c1d97db34a09e6031abfbeb77d91d2", 0x7a}, {&(0x7f0000000500)="6abf1d27780024f5f1db69c2f31ed8a27d5f85cb37ea4f816206935bd5073c1113d7cee4d6dee96f3b6360cbbc04489f898a18ddf3c3b89308ae9f5929af146afdd4607de854cd43aead1e179975dc69d39de2c2f3cd645904187aeb93d85ce7c44a34009d6a863be261616f34823df42b2bdd82254c27e8868d6ce3eee52ccbdbab1967c8f3e6b5f3b57d925deee3e5e16f3696769c8691a36dac0bb3760f6399d86a6d3eec0a46022f1b3d02ccdccdd7ccd3c1eeeec57783a2ccd86e730b3ceec8082e21", 0xc5}, {&(0x7f0000000600)="1c5ac9b7e15f6f68ea465d5fff8afefd6287c2deaf8ceb73511407d187dd8d2dfe3bdcbc7f84e210dc59774823f6b21b35bd", 0x32}, {&(0x7f0000000640)="b882c3b57a6f8bf8608f17d65ca9d382e4a54f5f6820a1fc2cffebf4a405450cda63edb1297cbbaf8ade40af82772ec08995faab11050f76e032eb01c59656c6a65905511542651d06b95f5e2c3cf021d2fd9bbe5fdbe23add81544eef9ead2f3d75158d66b6f6945f2c32d6ff4d76eaa2f1bc98032f9d51c789a27c46c8", 0x7e}], 0x9, 0x0, 0x0, 0x8000}], 0x1, 0x4000085)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000800)={0x20, 0x0, 0x5034, 0xb5, 0x9, 0x8, 0x1, 0x3})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f00000007c0)={0x4, 0x80000001, @name="b889cbe9b373ce3493042d47c694e0dae391cb364c5d0b491b572f39e6293de8"})

10:06:31 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00f9ffffff113ff227e1e6dcf66c0091000000"], 0xffffffffffffffc3, 0x0, 0x0})

10:06:31 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:31 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1696.316486][T18745] binder: 18743:18745 ioctl c0306201 20000200 returned -14
10:06:31 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fstatfs(r4, &(0x7f0000000200)=""/73)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x80, 0x2f, 0x1, r6})
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r7, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r8, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r9 = fcntl$dupfd(r7, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:31 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1000000000003)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = msgget(0x2, 0x260)
msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000080)=""/194)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)=0x1)

10:06:31 executing program 3:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70fa, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000180)=0x4)
times(&(0x7f0000000400))

[ 1696.636676][T18786] binder: 18778:18786 ioctl c0306201 20000200 returned -14
10:06:31 executing program 0:
syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x240000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffe05, 0x0, &(0x7f0000000100)=[@increfs={0x40046304, 0xfffffffe}, @increfs_done={0x40106308, 0x3}, @increfs_done={0x40106308, 0x1}, @register_looper], 0xfffffffffffffd6c, 0x0, 0x0})

10:06:32 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:32 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2004c0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x120, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40a4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK={0xb8, 0x4, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf88}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x20000044)

10:06:32 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r3)
add_key$user(&(0x7f0000000140)='user\x00', 0x0, 0x0, 0xeb8607d34edc5b6b, r3)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x40400)
socket$caif_seqpacket(0x25, 0x5, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1697.121771][T18920] binder: 18910:18920 ioctl c0306201 20000200 returned -14
10:06:32 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:32 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:32 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x80000007e91)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xcc, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x24, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x92c5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x447}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8080}, 0x4)

10:06:32 executing program 0:
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x7fffffff, 0x1}, 0xc)
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=[@acquire], 0xffffffffffffffc3, 0x0, 0x0})

10:06:32 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x4424, 0x2, 0x0, 0x0, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1697.634820][T18993] binder: 18989:18993 ioctl c0306201 20000200 returned -14
[ 1697.720546][T19021] binder: 19013:19021 ioctl c0306201 20000200 returned -14
10:06:32 executing program 1:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xa)

10:06:32 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:33 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x4e}], 0x1, 0x10, 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8820, 0x0)
setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000180)=0xa4, 0x4)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$SCSI_IOCTL_DOORUNLOCK(r7, 0x5381)
r8 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:06:33 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x200)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x815, 0xf89c4dc0d7c002b)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f0000000140)=0x3c05)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)})
ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x1)

[ 1698.161447][T19198] binder: 19152:19198 ioctl c0306201 20000200 returned -14
10:06:33 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:33 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x804)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=[@acquire], 0xffffffffffffffc3, 0x0, 0x0})

10:06:33 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1698.504648][T19236] binder: 19234:19236 ioctl c0306201 20000200 returned -14
10:06:33 executing program 1:
r0 = socket$inet(0x2, 0x4, 0x7)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={<r1=>0x0, 0xcc, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x1, @ipv4={[], [], @loopback}, 0x8dc}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e21, 0x401, @loopback, 0x6}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0xc}}, @in6={0xa, 0x4e24, 0xad02, @loopback, 0x769}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e21, 0x10000, @mcast2, 0x9}, @in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000140)=0x10)
time(&(0x7f00000001c0))
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[{0x9, 0x20, 0x9a, 0x1}, {0x0, 0x4, 0xf8, 0xfffffffa}, {0x279, 0x6, 0x9, 0x2}, {0xcbe0, 0x3, 0x40, 0x40}]}, 0x10)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r1, 0x7}, 0x8)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)

10:06:33 executing program 0:
r0 = semget$private(0x0, 0x3, 0x401)
semctl$IPC_INFO(r0, 0x0, 0x3, &(0x7f0000000240)=""/4096)
r1 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=[@acquire], 0xffffffffffffffc3, 0x0, 0x0})

[ 1698.606271][T19239] binder: 19238:19239 ioctl c0306201 20000200 returned -14
10:06:33 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x8000, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:33 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0xc2001, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000041000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f00000003c0)="aad81048b80000c0fe000000000f23c80f21f835000080000f23f866baf80cb8368be68cef66bafc0c66b8005066ef44d9f7430f0017c7442400a3000000c74424020f000000ff1c2466baf80cb87ae6908eef66bafc0c66ed440fc7be0ebd00006566420f0d146e", 0x22}], 0x1, 0x12, 0x0, 0xc5)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = gettid()
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0)
ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00')
ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f00000011c0)='\x00@\x00\x80\x00\x00\x80\x00')
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x3c)
ptrace$cont(0x18, r4, 0x0, 0x0)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r4, 0x0, 0x0)
ptrace$setregset(0x4205, r4, 0x303, &(0x7f0000000240)={&(0x7f00000002c0)="d96215616d6e24fd02e046840083654519eebed87c59e1fc69225d7b5c88502a43bc5472483427792dbee042ff9642421d2083a671bec56b61b03b434ddf04bff9e7b16b712aecfdf16b63c034def4fa77fa10abea734e7855d2682ed4441c3a9a5d20f2bde103614f796aa5422c4ff5c1b3b26b8a47dca8c4acd6f4945b2d12794656d3bdc7c6bb888953af83f34f71a13fde1b4359d8c143e39d05c30499ffc9ce2d7eee6176d2379ab8250c8d271eaabdd0bc6245a120", 0xb8})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x454d82, 0x0)
ioctl$BLKRAGET(r7, 0x1263, &(0x7f0000000140))
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x800, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x292c993fc7746463)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r9, 0x40044104, &(0x7f0000000180)=0xfffffe00)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)

10:06:33 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1698.850283][T19250] binder: 19248:19250 ioctl c0306201 20000200 returned -14
10:06:34 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1699.170392][T19303] binder: 19301:19303 ioctl c0306201 20000200 returned -14
10:06:34 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000200)=0x7fffffff)
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x6d6801, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000180)=0xfffffffd, 0x4)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:34 executing program 1:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x220000, 0x0)
write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0xfffffffffffffde9, 0xffffffffffffffda, 0x5, {0x1}}, 0xfffffffffffffee3)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)

10:06:34 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:34 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4ad9a92ac0ce008d, 0x0, &(0x7f00000000c0)=[@acquire], 0xffffffffffffffc3, 0x0, 0x0})

10:06:34 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1699.656288][T19450] binder: 19439:19450 unknown command 0
[ 1699.662501][T19450] binder: 19439:19450 ioctl c0306201 20000200 returned -22
[ 1699.662797][T19441] binder: 19436:19441 ioctl c0306201 20000200 returned -14
10:06:34 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a60000009ce80000e0ff000000", @ANYRES32=r2], 0x2}}, 0x0)
sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88300000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_MAC={0xa, 0x6, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x800)

10:06:34 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:34 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:35 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
setsockopt$inet_dccp_int(r5, 0x21, 0x4, &(0x7f0000000140)=0x9, 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000002c0)={0x3, {{0x2, 0x4e22, @multicast2}}, 0x1, 0x8, [{{0x2, 0x4e21, @rand_addr=0x9}}, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x8, @loopback}}, {{0x2, 0x4e21, @rand_addr=0x5}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}}]}, 0x490)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:35 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3fffffe)

10:06:35 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r5)
r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r5)
keyctl$assume_authority(0x10, r6)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000048000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000200)="b800008ec8f2a70f54b100a06667643e36f2a5c4d279a07c66b8b20000000f23c80f21f8663508003000660fba6a09060f320fc76835f23b8d8ed6"}], 0xab8, 0x10, 0x0, 0x37a)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r8, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000240)=0x2)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r7, 0xae80, 0x0)

[ 1700.220654][T19509] binder: 19507:19509 ioctl c0306201 20000200 returned -14
10:06:35 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'bond0\x00', {0x7}, 0xfffd})

10:06:35 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1700.649251][T19593] binder: 19589:19593 ioctl c0306201 20000200 returned -14
10:06:35 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xffff)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x1, 0x4, 0x4, 0xf5e8580657d784d5, 0xa1b, {}, {0x1, 0xc, 0x7, 0xfd, 0x3, 0x3, "09090ec3"}, 0x5, 0x6, @planes=&(0x7f0000000000)={0x32b, 0x100000, @mem_offset, 0x9}, 0x8, 0x0, <r1=>r0})
setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000240), 0x4)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x0, 0x0, 0x3, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9b090d, 0x87, [], @string=&(0x7f00000000c0)=0x7f}})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="3e3e640f79fa2e0fc718660f3881540a9a915568000fc7b00f000f01d866b8010000000f01c10f209766b93703000066b80500000066ba000000000f300f0ffe94", 0x41}], 0x1, 0x10, &(0x7f0000000240), 0x0)

10:06:35 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, r4, 0x1, 0x411138c4, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @rand_addr=0x91c}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x3, 0x101, 0x80, 0x5c]}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4050082}, 0x100)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r8, 0xc0c85666, &(0x7f00000002c0)={{0x1, @addr=0x6}, "22b74afaa0aa5e384cb47da3619270b066ba966112e6c3b8b59cfcf588c748db", 0x2})
r9 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = fcntl$dupfd(r10, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
ioctl$VIDIOC_S_AUDIO(r11, 0x40345622, &(0x7f0000000480)={0x4c, "3ecdf9bc3ae4478765b62fa7bb464473255904ac9ae32964d55f80cec6bd419b", 0x3, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:35 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:36 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:36 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x3c)
ptrace$cont(0x18, r4, 0x0, 0x0)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
openat$cgroup_type(r3, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
ptrace$cont(0x20, r4, 0x0, 0x0)
ptrace$peekuser(0x3, r4, 0x6)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
socket$bt_cmtp(0x1f, 0x3, 0x5)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0xf68af017ff568e61, 0x0)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1701.190674][T19653] binder: 19651:19653 ioctl c0306201 20000200 returned -14
10:06:36 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
socket$inet_sctp(0x2, 0xfb769e2a9f3b63bf, 0x84)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x40, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10, 0x80800)
ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000240))
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000080)={'nat\x00', 0x0, 0x3, 0xe, [], 0x100000000000015e, &(0x7f0000000140)=[{}, {}, {}, {}], &(0x7f0000000040)=""/4}, &(0x7f00000001c0)=0x78)

10:06:36 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1701.588013][T19755] binder: 19745:19755 ioctl c0306201 20000200 returned -14
10:06:36 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
inotify_add_watch(r3, &(0x7f0000000140)='./bus\x00', 0x80)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000180)={0x5f62})

10:06:36 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
statx(r5, &(0x7f0000000140)='./bus\x00', 0x2c00, 0x410, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
lstat(&(0x7f0000000180)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
write$P9_RGETATTR(r3, &(0x7f00000003c0)={0xa0, 0x19, 0x1, {0x40, {0x4, 0x1, 0x2}, 0x28, r6, r7, 0x5, 0xf15, 0x8000, 0x8001, 0x8, 0x4, 0x1, 0x2, 0x6, 0xfff, 0xc593, 0x6, 0x5, 0x10001, 0xd}}, 0xa0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r10 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r10, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
bind$inet(r10, &(0x7f0000000480)={0x2, 0x4e21, @empty}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:36 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="66b9800000c00f326635000100000f306766c7442400020000006766c7442402080000006766c744240600000000670f0114240f011a660f3a40c3b7263e660f3880aafd6df32e0f013d2e2e0fc7990100342d66b8010000000f01c16766c7442400980000006766c744240287b600006766c744240600000000670f011c24", 0x7f}], 0x1, 0x4, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1}, @vmwrite={0x8, 0x0, 0x6, 0x0, 0x2, 0x0, 0x3, 0x0, 0x37}], 0x2)

10:06:36 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:37 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1702.165674][T19788] binder: 19787:19788 ioctl c0306201 20000200 returned -14
10:06:37 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:37 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x400000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000002c0)={0x3483, 0x2, 'client1\x00', 0xfe3ed64f181ccfaf, "4161e4726536a6b0", "733e503471f3cfbeca50c5b723602a571df6918848f8bee7091e520a39596c96", 0x5, 0x5})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x103fc, 0x0, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8)
fcntl$dupfd(r4, 0x0, r4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1702.533753][T19798] binder: 19797:19798 ioctl c0306201 20000200 returned -14
10:06:37 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x6)

10:06:37 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:37 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
r3 = socket$tipc(0x1e, 0x8, 0x0)
getpeername$tipc(r3, &(0x7f0000000140), &(0x7f0000000200)=0xffffffffffffffe1)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000180)={<r6=>0x0, 0xc66d}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000002c0)={r6, 0x6, "6c71e7305380"}, &(0x7f0000000300)=0xe)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:37 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:38 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x9)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
fsync(r1)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
connect(r0, &(0x7f00000014c0)=@can, 0xfffffffffffffccb)

10:06:38 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f0000000140)={0x0, 0x7})
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x71, 0x1, {{0x80}, 0x7}}, 0x18)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0, 0x202}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1703.029148][T19819] binder: 19817:19819 ioctl c0306201 20000200 returned -14
10:06:38 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:38 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1703.413903][T19831] binder: 19830:19831 ioctl c0306201 20000200 returned -14
10:06:38 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff})
ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f0000000180))
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:38 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000002c0)={0xa30000, 0x1, 0x6, <r3=>0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x990afc, 0x2, [], @ptr=0xfffffffffffffff8}})
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r3, 0xc1004111, &(0x7f0000000300)={0x2, [0x8, 0x5, 0x10000], [{0x7fffffff, 0x0, 0x1, 0x1}, {0x8, 0xbc5, 0x0, 0x0, 0x0, 0x1}, {0x53, 0x9, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x2, 0x1}, {0xffffffff, 0x1ff, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x6, 0x0, 0x1}, {0x4b, 0x3ff, 0x1, 0x1, 0x1, 0x1}, {0x100, 0x101, 0x0, 0x1, 0x1, 0x1}, {0x3, 0xffff7fff, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x0, 0x1}], 0xffff})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r7 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x400000)
getpeername$l2tp6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x20)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:38 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x2)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0x7, 0x2, 0x8, 0x8, 'syz0\x00', 0x2}, 0x1, [0xb8, 0x5, 0x8b65, 0x5, 0xbd1, 0x386fe15b, 0xa35, 0x7ff, 0x81, 0x8, 0x80, 0x1f, 0xfffffffffffffff8, 0x5, 0x81, 0x80000001, 0x9, 0x3, 0x9, 0x2, 0x1f, 0x7, 0x5, 0x2, 0x8, 0x2, 0x8, 0x1, 0x1, 0x20, 0x2000000, 0x1000000000000000, 0x1ff, 0x3, 0x2, 0x8, 0x3, 0x9, 0x4f9861d2, 0x401, 0x7, 0x7fffffff, 0x1, 0x7, 0x1000, 0x6, 0x4, 0x6, 0xf2a, 0x200, 0x5, 0xff42, 0x8000, 0x3, 0x9, 0x0, 0x8001, 0x7, 0x80000000, 0x2, 0x3f, 0x80000000, 0x2, 0x7, 0x3, 0x8, 0x45f2, 0xffff, 0x25d2, 0x80, 0x3e, 0xfff, 0x0, 0x80000001, 0x3, 0x6, 0x7, 0x8, 0x9, 0x6, 0x4, 0x80000000, 0x3, 0x7, 0x8000, 0x2, 0x8, 0x7, 0x40, 0x7796, 0x1000, 0x7, 0x200, 0x401, 0x8, 0x1, 0xdb6e, 0x7, 0x3, 0x1ff0, 0x96b9, 0x7f, 0x9, 0xfffffffffffffffc, 0x8, 0x1f, 0x2, 0xfff, 0xff, 0x1, 0x4, 0x3, 0x5, 0x3f6c00000000, 0x9, 0xc210, 0x401, 0x4, 0x100000000, 0x8000, 0x8, 0x1000, 0xfffffffffffffff8, 0x7, 0x1000, 0x7, 0x7, 0xfcef]})
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000540)={r1})

10:06:38 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1703.880645][T19898] binder: 19884:19898 ioctl c0306201 20000200 returned -14
10:06:39 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:39 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1704.273170][T19960] binder: 19957:19960 ioctl c0306201 20000200 returned -14
10:06:39 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:39 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x400, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
openat(r4, &(0x7f00000000c0)='./bus\x00', 0x0, 0x10)
syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x0, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r7 = fcntl$dupfd(r1, 0xc0a, r5)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1704.584174][T20050] binder: 20048:20050 ioctl c0306201 20000200 returned -14
10:06:39 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:39 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:39 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f00000002c0)=""/145)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1704.899190][T20077] binder: 20074:20077 ioctl c0306201 20000200 returned -14
10:06:40 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:40 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1705.240254][T20184] binder: 20183:20184 ioctl c0306201 20000200 returned -14
10:06:40 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:40 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, [0x9, 0x10c040aa, 0x400, 0x2]})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x200200, 0x0)
ioctl$RNDCLEARPOOL(r5, 0x5206, &(0x7f0000000240)=0x1)

[ 1705.511697][T20195] binder: 20193:20195 ioctl c0306201 20000200 returned -14
10:06:40 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100))
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1705.797117][T20302] binder: 20301:20302 ioctl c0306201 20000200 returned -14
10:06:40 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:41 executing program 3:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x44040, 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f0000000180)={0x7, 0x21, 0x2}, 0x7)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00')
sendmsg$FOU_CMD_GET(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8044}, 0x80)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:06:41 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100))
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1706.180457][T20343] binder: 20339:20343 ioctl c0306201 20000200 returned -14
10:06:41 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100))
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:41 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1706.520556][T20420] binder: 20419:20420 ioctl c0306201 20000200 returned -14
10:06:41 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:41 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
bind$isdn_base(r3, &(0x7f0000000140)={0x22, 0x5, 0x0, 0x4, 0xe0}, 0x6)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1706.859967][T20534] binder: 20530:20534 ioctl c0306201 20000200 returned -14
10:06:42 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:42 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:42 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0xef, &(0x7f00000001c0)={0x0, <r3=>0x0}}, 0x216)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r3, 0x80000001, 0xc}, 0x1)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r3, 0x3, 0x14}, 0xc)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr="21e61fb9844636f59244a6a804a1019e"}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x50}}, 0x11)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000180)=0x4)

[ 1707.179230][T20540] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1707.189793][T20543] binder: 20541:20543 ioctl c0306201 20000200 returned -14
10:06:42 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r4, 0xc0245720, &(0x7f0000000180)={0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x1000, 0x0)
ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x4400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:42 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x401)
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x84000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x2, r3, 0xa9f0f6e2626ec45b, 0x0, @in6={0xa, 0x4e24, 0x6, @empty, 0x9}}}, 0xa0)

10:06:42 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:42 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[ 1707.558789][T20557] binder: 20555:20557 ioctl c0306201 20000200 returned -14
10:06:42 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x40)

10:06:42 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:43 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7)
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x2, 0xa8996c84d4d60d48)
ioctl$USBDEVFS_GET_SPEED(r1, 0x551f)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1800100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x90bd}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)

[ 1707.918715][T20568] binder: 20567:20568 ioctl c0306201 20000200 returned -14
10:06:43 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:43 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0xc00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f00000002c0)=""/4096)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000001300)="baf80c66b8fc04bd8266efbafc0c66ed66b8008000000f23d00f21f866350000000e0f23f83e0f01c966b9800000c00f326635002000000f30cf66b80a0000000f23c00f21f8663502000d000f23f866b9280200000f3266b9800000c00f326635001000000f30360ff2d866b9b40a000066b8f300000066ba000000000f30", 0x7f}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xebe, 0x10000)
name_to_handle_at(r3, &(0x7f0000000180)='./bus\x00', &(0x7f00000012c0)=ANY=[@ANYPTR=&(0x7f0000001380)=ANY=[@ANYBLOB="6b8228c243540e76ed34b6db49b7dfb45d3f14692078cc2cf0506acc35d3f00a4790990735a148e000002e2f6e681a2423468b28394bb8e5d10bc91f81a84ca479607709535fec672c73b5f41f66f8f6e8096953e47c6360834f5e82930e9c083ec35c40a3ccb4b3b0e0958b6fbc7fb93245782ce7a3e48426f6c15dbfc139ad2e7ba981ccd7452c2a8e7df000"/160, @ANYRESDEC=r2, @ANYRES32, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYRES32, @ANYPTR, @ANYPTR64]]], &(0x7f0000000200), 0x1800)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:43 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

10:06:43 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$P9_RFSYNC(r1, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x9)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000180)={0x500000, 0xffff, 0x8, <r4=>0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa20934, 0x4000000, [], @p_u32=&(0x7f0000000080)=0x5}})
ioctl$RTC_UIE_ON(r4, 0x7003)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1, 0x3, 0x8c, 0xff, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0x4}, 0x4, 0x7, 0x80000001, 0x3, 0x80000001, 0x4, 0x1}, 0x0, 0xb, r1, 0x8)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))

[ 1708.316156][T20578] binder: 20577:20578 ioctl c0306201 20000200 returned -14
10:06:43 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:43 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0)

[ 1708.676613][T20606] binder: 20598:20606 ioctl c0306201 20000200 returned -14
10:06:43 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
utimes(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000180)={{}, {0x77359400}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000200))
ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
setsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f00000002c0)="ca9c4773086e483b71679ed6398a13ac469fcd7fac88d161e8a4de28cc2a3b11eabb8df466bede60e3181c9971c239df7a4ad008b35469c23f14d25d8fe3cdd2c6f32914e0f7e884fec58148c248d38d5c7c0812ae0b7d17bd45c44fda10307b20eb117f7dde9c054ff2f64ae9f812db456ddccb1e3c588fa2373292fde22bd031a02c1105a4f9fee6b0896aad68c6810abd2a94e829", 0x96)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:43 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:44 executing program 1:
clock_gettime(0x0, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0})
utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{r0, r1/1000+30000}, {0x0, 0x2710}})
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x10000000400201)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r8, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r9, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
bind$rds(r9, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0xffffff01)
ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000001c0)={0x730000, 0x5, 0x6, r8, 0x0, &(0x7f0000000180)={0x9c0907, 0x3, [], @value=0x10001}})
r10 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r10, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r11 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r11, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r12 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
ppoll(&(0x7f0000000280)=[{r10, 0x2080}, {r11, 0x10000}, {r12, 0x10}], 0x3, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000300), 0x8)
ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000000)={0x9000000, 0xd, 0x4, 0x80000810, 0x5, {0x77359400}, {0xd228f87f5848658, 0x18, 0x9, 0x28, 0x8, 0x6, "592f8be5"}, 0x1, 0x3, @fd, 0x6, 0x0, <r13=>0xffffffffffffffff})
timerfd_gettime(r13, &(0x7f0000000080))

[ 1709.013194][T20701] binder: 20700:20701 ioctl c0306201 20000200 returned -14
10:06:44 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

10:06:44 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1709.419443][T20736] binder: 20725:20736 ioctl c0306201 20000200 returned -14
10:06:44 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x9)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:44 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:44 executing program 1:
arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000080))
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x104800)
ioctl$RTC_PIE_OFF(r0, 0x7006)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x440, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000380)="c43528ab33fe6a6372b501f70518fd60", 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000500)={0x3, 'virt_wifi0\x00', {0x1}, 0x81})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r7, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
read(r7, &(0x7f0000000540)=""/4096, 0x1000)
ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f00000003c0)={0x6, "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"})
ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000000c0)={0x0, 0x0, @ioapic})

[ 1709.727835][T20827] binder: 20825:20827 ioctl c0306201 20000200 returned -14
10:06:44 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:45 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
socketpair(0x11, 0x3, 0x7f, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000180)=0x8, 0x4)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1710.015596][T20836] binder: 20835:20836 ioctl c0306201 20000200 returned -14
10:06:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x4424, 0x2, 0x0, 0x0, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:45 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1710.466431][T20910] binder: 20908:20910 ioctl c0306201 20000200 returned -14
10:06:45 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x4424, 0x2, 0x0, 0x0, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:45 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x36d2ae18}, 0x100, 0x0, 0x2, 0x6, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:45 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3)

[ 1710.874132][T20956] binder: 20955:20956 ioctl c0306201 20000200 returned -14
10:06:46 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:46 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="040000000000000002000000070000000000000000100000010000000100000004000000000000000000000000000000000000800400000004000000050000000000000006ffffff7f0000000000000000000000007b0000000a0000007f0000000300000001000000ff0700000300000053000000000000000000000000000000190000e00900000002000000ff0100000010000004000000ff00"/169])

10:06:46 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000140))
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20408000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, r7, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc89}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x63d4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x59c}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xec, r7, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffc1}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xbf07}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd25}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x88}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000084}, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1711.397887][T21073] binder: 21071:21073 ioctl c0306201 20000200 returned -14
10:06:46 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x4424, 0x2, 0x0, 0x0, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:46 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:46 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x6)

[ 1711.764535][T21111] binder: 21100:21111 ioctl c0306201 20000200 returned -14
10:06:46 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00')

10:06:47 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:47 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
prctl$PR_CAP_AMBIENT(0x2f, 0x6169484b2c1ab3f1, 0x10)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r5)
add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="df83a28f0c2d6657c352c310093f9395c88e89f4be9df981428c3e24579adb72a4e651a0c7737d50ae361f8f4acf03eff22aa37ebba11268c49ede4a86d052ee9375a4f1b583e824182fd3c2ea5e79f443e21f323b79cd1b5156785d1ea6cf444689b9", 0x63, r5)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1712.108613][T21200] binder: 21199:21200 ioctl c0306201 20000200 returned -14
10:06:47 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000000))

10:06:47 executing program 5 (fault-call:15 fault-nth:0):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:47 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, 0x0, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:47 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7)

[ 1712.481616][T21235] binder: 21222:21235 ioctl c0306201 20000200 returned -14
10:06:47 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x200)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:47 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, 0x0, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:47 executing program 1:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xc04d0cbaafb0ed67, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xffff, 0x482400)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)

[ 1712.880531][T21327] binder: 21326:21327 ioctl c0306201 20000200 returned -14
10:06:48 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="75706461746520656372797074667320747275737465643a0088cdf07a93478d53eafc43e2ee50c53ed1499cbfa085529baf75c21ec5af82b4d9e1b1f1c9d4503b0bd3bad954e1df248341bbd937b234f132a99fa094c41121ff19b3ce291da175d73afd91fca8ee50affa1bcb0947075df6"], 0x19, 0xfffffffffffffff8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000140)=0x1)
fcntl$dupfd(r5, 0x0, r5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:48 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, 0x0, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:48 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]})

10:06:48 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=[@acquire], 0xffffffffffffffc3, 0x0, 0x0})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x2)
r7 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x11c, 0x0, &(0x7f00000004c0)=[@enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/194, 0xc2, 0x1, 0x1a}, @fd, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}, 0x40}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x1, 0x2}, @fda={0x66646185, 0x8, 0x1, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x27}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}, 0x40}, @free_buffer={0x40086303, r6}, @free_buffer={0x40086303, r7}, @acquire_done={0x40106309, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0xc69aac2926dfd617, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/121, 0x79, 0x0, 0x3e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/48, 0x30, 0x2, 0x8}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}}, @request_death={0x400c630e, 0x3}], 0xad, 0x0, &(0x7f0000000600)="1dc3bde939f4c0ab7938f59aa8a207da3db7f55acc86a22b578ec5d0f0515941a8b7b5512983253d53fa6cde9ee4889acd9cae74a4d8af4cf3d0681ef6cd2d059c9722cf2ea2c91ae435ee95e14adfd255e7076c49945fbc06f4ed330226e76661f46946b7d89ad690a85ff464662d078be46896494c70800f68cd56286f43a7702b5a728d1a12985efb7e4e73c99792742a44ee2f9296ca9d51b0b82163546d5a7bbee31d1f8104c02d94b951"})

10:06:48 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={r8}, 0x10)
setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r8, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1713.342977][T21367] binder: 21350:21367 ioctl c0306201 20000200 returned -14
[ 1713.366961][T21362] binder: 21348:21362 ioctl c0306201 20000200 returned -14
10:06:48 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x40800)
ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r1 = dup(r0)
signalfd4(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x80800)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0xffffff80)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)

10:06:48 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:48 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7)
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))

[ 1713.843648][T21561] binder: 21560:21561 ioctl c0306201 20000200 returned -14
10:06:48 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000680)={{0x149, @local, 0x4e23, 0x1, 'rr\x00', 0x20, 0x8, 0x40}, {@rand_addr=0x1, 0x4e24, 0x2, 0x632f, 0x81, 0x400}}, 0x44)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r4=>0x0, <r5=>0x0})
ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x8, 0x5, 0x4, 0x200000, 0xffffffe1, {r4, r5/1000+10000}, {0x2, 0x8, 0xff, 0x20, 0x3f, 0x1f, "e9ae2196"}, 0xfff, 0x4, @fd, 0x7fffffff, 0x0, <r6=>r0})
socketpair(0x14, 0x2, 0x5, &(0x7f0000000380)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-monitor\x00', 0x408000, 0x0)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r9, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x51393565ad824db8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, 0x0, 0x40, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xd9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x401}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r7}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bridge\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r9}]}, 0x80}, 0x1, 0x0, 0x0, 0x4410}, 0x8000)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x8, 0x10000)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0xa0, r10, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x13cd}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xd}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x20001054)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=[@acquire], 0xffffffffffffffc3, 0x0, 0x0})
r11 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r11, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY(r11, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x819421}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, r12, 0x708, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xffffffff}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x6105}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x6}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x401}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth1\x00'}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

10:06:48 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0xa4080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
truncate(&(0x7f0000000140)='./bus\x00', 0x5)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:49 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x4e}], 0x1, 0x0, 0x0, 0xfffffffffffffdf4)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

10:06:49 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1714.164843][T21571] binder: 21568:21571 ioctl c0306201 20000200 returned -14
10:06:49 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000))

10:06:49 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x8, &(0x7f0000000140)=[{0x200, 0x2, 0xdc}, {0x4a0a, 0x2, 0x1, 0x4}, {0x3, 0x8, 0xd5, 0x1}, {0xfc00, 0x40, 0xbf, 0xa0000000}, {0x1f, 0x24, 0x4, 0x6}, {0xfffe, 0x7f, 0x3f, 0x100}, {0x4, 0x7, 0x6f}, {0x0, 0x3, 0x80, 0xbb}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1714.328566][T21579] binder: 21577:21579 ioctl c0306201 20000200 returned -14
10:06:49 executing program 0:
r0 = socket(0x1a, 0x4, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r1 = dup(r0)
accept4$packet(r1, 0x0, &(0x7f0000000180), 0x80000)
r2 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffc6e, 0x0, &(0x7f00000000c0)=[@acquire], 0xffffffffffffffc3, 0x0, 0x0})
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
fcntl$getownex(r2, 0x10, &(0x7f0000000040))
pipe(&(0x7f0000000100))
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4)

[ 1714.540488][T21636] binder: 21624:21636 ioctl c0306201 20000200 returned -14
10:06:49 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x6, 0x4)

10:06:49 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1714.854807][T21758] binder: 21730:21758 ioctl c0306201 20000200 returned -14
10:06:50 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
listen(r3, 0x0)
r7 = socket(0x11, 0x800000003, 0x0)
bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a60000009ce80000e0ff000000", @ANYRES32=r8], 0x2}}, 0x0)
r9 = geteuid()
setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@local, @in6=@empty, 0x4e22, 0x0, 0x4e20, 0x4, 0x2, 0x100, 0x40, 0x6c, r8, r9}, {0x800000000, 0x6, 0x0, 0x7, 0x1, 0x6, 0x100000001, 0x6}, {0xa1f, 0x100000000, 0x5, 0x3}, 0x8, 0x0, 0x4, 0x0, 0x1, 0x3}, {{@in6=@local, 0x4d2, 0x3c}, 0x2, @in6=@loopback, 0x3507, 0x0, 0x1, 0x20, 0x3ff, 0x8, 0x400007ff}}, 0xe8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:50 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000140)={0xfeff, 0x3a0, 0x4, 0x7}, 0x8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:50 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x1, 0x0)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000080)=0x9, 0x4)
recvfrom$inet6(r0, &(0x7f0000000180)=""/83, 0x53, 0x40002041, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x10201, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x22a6, 0x2002)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000040))
ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', @ifru_flags=0x2})
setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000000)=0x6, 0x4)

10:06:50 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:50 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:50 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x161180, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0xfffffff7, 0x4)

10:06:50 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r4, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r5 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f0000000140)=""/74)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r7, 0x0, r7)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000200)={0x60, 0x0, 0x3, {{0x5, 0xc0000000, 0x2, 0x4, 0x7, 0x1, 0x3ff, 0x4}}}, 0x60)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:51 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:51 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x10000)

10:06:51 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x11940, 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))

10:06:51 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:51 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000001ee8)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x2, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback={0x200000000000000}, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r7, 0x0, r7)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r5, 0xae80, 0x0)

10:06:51 executing program 1:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101080, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9d67, 0xffffffff, 0x7}, &(0x7f0000000080)=0x10)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)

[ 1716.490640][T22052] binder: 22051:22052 ioctl c0306201 0 returned -14
10:06:51 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1716.746628][T22132] binder: 22095:22132 ioctl c0306201 0 returned -14
10:06:51 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000000)="b06fd4f9a507a3569fff00000000000000000000004000"})
sendto$unix(r0, &(0x7f00000000c0)="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", 0x150, 0x240c0000, 0x0, 0x0)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)

10:06:51 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:52 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x504002, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0xfddf4cca51f30a78)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r2})
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)

[ 1717.046932][T22171] binder: 22170:22171 ioctl c0306201 0 returned -14
10:06:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x801, 0x0)
r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
openat(r3, &(0x7f0000000140)='./bus\x00', 0x200, 0x14)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x0, 0x3, 0x0, [], [{0x6, 0x8001, 0xffff, 0xffffffffffff8000, 0x4ffd, 0x9a6}, {0x7, 0x786, 0x7, 0x400, 0xce, 0x17}], [[], [], []]})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x20, 0x6, 0x6, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000041}, 0x40)
fcntl$dupfd(r5, 0x0, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:52 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:52 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x100)
r0 = gettid()
r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xffff, 0x200240)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r1, 0x10, 0x1, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)
syz_open_procfs(r0, &(0x7f0000000000)='attr/exec\x00')

10:06:52 executing program 1:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4000, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$RTC_VL_CLR(r2, 0x7014)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x895812c4abcdf8d5, 0x10000, 0x3c})
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)

10:06:52 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$RTC_WIE_OFF(r5, 0x7010)
fcntl$dupfd(r3, 0x0, r3)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:52 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:52 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000, 0x80)
connect(r0, &(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000140))
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
clock_adjtime(0x0, &(0x7f0000000200)={0x10001, 0x7fffffff, 0x0, 0x0, 0x2, 0x4, 0xfff, 0xa2c, 0xf8, 0x10001, 0x200, 0x6, 0x397, 0x3f, 0x81, 0x750, 0x5, 0x401, 0x9, 0x5a2, 0xdbe, 0x0, 0xffffffff, 0xf7a, 0x10000, 0x9})
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r4}, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x5, 0x7, 0x204, 0xfffffff7, 0x9, 0x1, 0x1, 0xd7, r4}, 0x20)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x1265f6349fc939d6, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000100))
accept4(r0, 0x0, &(0x7f00000001c0), 0x40000)

10:06:53 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:53 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:53 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = getpid()
ptrace$getregs(0xe, r0, 0x0, &(0x7f0000000000))
r1 = socket(0x10, 0x3, 0x0)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000380))
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r3 = geteuid()
getresgid(&(0x7f00000000c0), &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140))
lchown(&(0x7f0000000080)='./file0\x00', r3, r4)
fchown(r2, 0x0, r4)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="1a9d9435375cdd370e5d9842dd4356b540826c6d300b9bc555ad05801d9d2a3b05a8c230e1d1c20de029fdc47937061dfc45a2a08468ceebdfcc1e8b9051f4702a8365a8fcb1b14b7ba23e2f922e501c62656502dc5a2d39eea1ac7e8dbcd163e645c7dcfdb6fd97ef51734e956df7a03fdf8b5960ef75fd3c6e535c3df4f3d88f2080a06f699208fec3707399fd940df22c137aefd091d25ba23c0f817ec90f1633c1d277c3af48e7da25688d388ebc643619a4f4f0daeeaccc87f4dae8f70cdc2a2fae41e9efb2a374a92a9504a6e7296e694142dec0428bdcd050c877aede2378f95b55c301aa736ecb68c4", 0xed}, {&(0x7f0000000140)="5c29850da41d4ed75dfffe89f0177e10b76df274340dd147555f548c88bd576895e2a3912b29ffbd78f56ae445e9f3fb01aa29f81ede760e3e5d5d7064ddd2b872e6063315c733c3ee2f629896558f8002821b8170a69df6d3168ce97af55577fd2bf9f95242987a155f79d43b0db04f5f0247b56c7932238ec133457d26df", 0x7f}], 0x2, &(0x7f0000000200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x90, 0x0, 0x7, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0xf, "64bab34abb6b8f49337a4662e7"}, {0x7123b2e481d47dd, 0x4, ':\x00'}]}, @ssrr={0x89, 0x23, 0x11, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0x37}, @loopback, @loopback, @remote, @multicast1, @local]}, @ssrr={0x89, 0x1f, 0xb9, [@rand_addr=0x2, @local, @multicast1, @multicast2, @rand_addr, @empty, @multicast1]}, @rr={0x7, 0x23, 0xa5, [@rand_addr=0x1, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0xc7, [@broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x7, @loopback]}, @noop, @ra={0x94, 0x4}, @end, @lsrr={0x83, 0x1f, 0x49, [@dev={0xac, 0x14, 0x14, 0x2c}, @multicast2, @multicast1, @local, @remote, @multicast1, @empty]}]}}}], 0x110}, 0x2)

10:06:53 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:53 executing program 1:
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x100)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)

10:06:53 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:53 executing program 1:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x600540, 0x0)

10:06:54 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:54 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = getpid()
tkill(r3, 0xc)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000140)=0x3e3, 0x4)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:54 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x21, 0x0, 0x0, 0x20, 0xfc, 0x0, 0x0, 0xc100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x799, 0x2a120000}, 0x20, 0x0, 0x0, 0x2, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r6 = socket(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x6, &(0x7f0000000380)={0x8, &(0x7f0000000340)=[{0x2, 0x2, 0x81, 0xffffffff}, {0x7, 0x7, 0x1, 0x80000000}, {0x20, 0x9, 0x2, 0x2}, {0x9d, 0x26, 0x6}, {0x100, 0x7, 0x36, 0x6}, {0xfff7, 0x7f, 0xe6, 0x9}, {0x2, 0x6, 0x5b, 0x4}, {0x0, 0x81, 0x4, 0x9}]})
ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00')
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r8, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000300)=0x3, 0x4)
sendmsg$NLBL_CALIPSO_C_LIST(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r7, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40079}, 0x8002)

10:06:54 executing program 1:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={<r4=>0x0, 0x4}, &(0x7f0000000080)=0x8)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
bind$unix(r5, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x1ff}, 0x8)

10:06:54 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1719.521603][T22568] kvm_set_msr_common: 240 callbacks suppressed
[ 1719.521801][T22568] kvm [22560]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0xfb
[ 1719.577229][T22568] kvm [22560]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x55
10:06:54 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = syz_open_dev$dri(0x0, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000000c0))
ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x62, &(0x7f0000000080)={'tunl0\x00', @ifru_map={0x9e6, 0x4, 0xfff, 0xfd, 0x5, 0x81}})
sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020c02eb1e00000029bd7000fcdbdf2502001000000004d6000004d60000000003001100ff20000002004e22ac1e0001000000000000000014000800a804000084bf902e822bccf5155182890d34637da675894f9f35936fe091dc3329ce7bd5130fb0debf2c7dd29f63c142367005d778b082d6df77b02fc93919a6d34be06db456065fc968caa2f43ce3aa66ffd8522e7be23b58031b684bd2e468d20b2831639b7251128565f048017095bd75a0f74ecc54cc2159402ce546da6f21cdbb353d822eae4786be2cf6cb632244c7cfbba10c5afd5c000000020013005800000026bd7000033500000100140003000000b34c74323e2f974d0f209dcc2b103389cb047b136ce1c0e3eda8a33a3de86c3c687fd2e9d99153e0e15b8fd280acc114786817b8a1ed4294bdc352bf8b4787237659b336942f298cb8bc2588fe52c798b99a112b030087cf253912cfd7a396f7663a6d5292243fed3ab9f2593709df76f3e8a371a36d741a2a80bdc6bf2cb6a1289f8a8a7dcf2a5ee6ddac6be38d7ed68c54118ba82ddccc8360c1a55aef02728a7f6b2b6b684e31a9d9ce9c3a08453256a5bbc1a7e01e46ea5ff7a9747b"], 0xf0}}, 0x1)
dup2(0xffffffffffffffff, r3)
ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000000)={0x6, 0x3, 0x8, 0x5, 0x8, 0x2})
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000100)={0x7, [0x8000, 0x8f, 0x81, 0x3f, 0x4, 0x8000, 0x9]}, 0x12)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
flock(r5, 0xc)

10:06:54 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:54 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xcf9ab6b800d4e900, &(0x7f0000000140)={@empty, <r5=>0x0}, &(0x7f0000000180)=0x14)
setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000200)={@empty, r5}, 0x14)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
fcntl$dupfd(r4, 0x0, r6)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:54 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x33, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062"], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
recvmsg(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/53, 0x35}, {&(0x7f00000012c0)=""/187, 0xbb}, {&(0x7f0000001380)=""/244, 0xf4}, {&(0x7f0000001480)=""/204, 0xcc}], 0x6, &(0x7f0000000240)=""/54, 0x36}, 0x20)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000140)={{0x3, 0x2, 0x0, 0x2, 0x280000}})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:55 executing program 1:
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000000))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x481, 0x2)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000a60000002de8000a71000000fd", @ANYRES32=r2], 0x2}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, &(0x7f0000000100), &(0x7f0000000140)='GPL\x00', 0xea, 0x0, 0x0, 0x41100, 0x8, [], r2, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xb, 0x5, 0xfffffff9}, 0x10}, 0x78)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00')
r7 = socket(0x11, 0x800000003, 0x0)
bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a60000009ce80000e0ff000000", @ANYRES32=r8], 0x2}}, 0x0)
sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2a80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r6, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd71, 0x4}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x2c008000}, 0x100)
ppoll(&(0x7f0000000280)=[{r0}, {r3, 0xa02b406dc38f21bc}, {r4, 0x1000}], 0x3, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)={0x7fff}, 0x8)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)

[ 1720.065572][T22680] binder: 22675:22680 unknown command 1494644389
[ 1720.072540][T22680] binder: 22675:22680 ioctl c0306201 20000200 returned -22
10:06:55 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x33, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062"], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1720.437627][T22776] binder: 22775:22776 unknown command 1494644389
[ 1720.444223][T22776] binder: 22775:22776 ioctl c0306201 20000200 returned -22
10:06:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x2, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000071000/0x2000)=nil})
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x400020, 0x0)
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000180)=0x7f)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:55 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x33, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062"], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1720.787471][T22816] binder: 22813:22816 unknown command 1494644389
[ 1720.794202][T22816] binder: 22813:22816 ioctl c0306201 20000200 returned -22
10:06:56 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe9"], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1721.047639][T22895] binder: 22894:22895 unknown command 1494644389
[ 1721.054670][T22895] binder: 22894:22895 ioctl c0306201 20000200 returned -22
10:06:56 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x2, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000180)={0xd, 0x5})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = gettid()
ptrace$getsig(0x4202, r5, 0x7, &(0x7f0000000200))
fcntl$dupfd(r4, 0x0, r4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:06:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
socket$phonet(0x23, 0x2, 0x1)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000140)="baf80c66b8fc27c18266efbafc0c66b8630916ec66efa7660f38413e0000c4e3f5cf090c0f01be0010b83c008ee89a1900ba0067660fda842358000000660f38814e39642e670f01cf", 0x49}], 0x5f, 0x0, 0x0, 0x0)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:56 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe9"], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:56 executing program 1:
setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@v1={0x2, "633b201e6e1bde7d472283"}, 0xc, 0x7)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)

[ 1721.526883][T22910] binder: 22908:22910 unknown command 1494644389
[ 1721.533866][T22910] binder: 22908:22910 ioctl c0306201 20000200 returned -22
10:06:56 executing program 1:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)=0xffffffffffffffff)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)

10:06:56 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4d, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe9"], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000000)=""/36)
ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000140)={0x0, 0x7fff, 0x5, 0x1, 0x3})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
write$UHID_SET_REPORT_REPLY(r4, &(0x7f00000002c0)={0xe, {0xa, 0x40, 0x7f, 0xf2, "668a44030abc29165619cd3e860e36088717bec1014b27677c27effca6ded5d2e1a398d33d624ed393665a248d062894794a11e1ff3195192cd74dcd3c7e1818cea2e9c7875a69211ad74cc437367a045f92c4bc09f8fb60f2c0930a2ef4311e3dc1cbee711804c07b45b51dc0533946ef71df4668be151408c09e198b71a9431183d36f0366c7d1f1e81c6186c3be58c649fcacf273e2a1c741015d5e2b0a0faffdf34968d9f422bc50bbdad524177796f77622a99debe2e9dd691b08b948f3e1a2802fe2dab0747c5539ca2e50f4c0db0990b1a27437547db9613d5c1dc950ac571dd0db6a4ed3ef8cca73a346d9a168ce"}}, 0xfe)
fcntl$dupfd(r5, 0x0, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1721.875617][T23009] binder: 22998:23009 unknown command 1494644389
[ 1721.882490][T23009] binder: 22998:23009 ioctl c0306201 20000200 returned -22
10:06:57 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x5a, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a"], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:57 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000000)="b06fd4f9a507a3569fff00000000000000000000004000"})
sendto$unix(r0, &(0x7f00000000c0)="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", 0x150, 0x240c0000, 0x0, 0x0)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)

[ 1722.138474][T23030] binder: 23029:23030 unknown command 1494644389
[ 1722.145425][T23030] binder: 23029:23030 ioctl c0306201 20000200 returned -22
10:06:57 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000140))
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000))
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_FONT(r6, 0x4b60, &(0x7f0000000000)=""/36)
ioctl$KDGKBMETA(r6, 0x4b62, &(0x7f0000000180))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:57 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x5a, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a"], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:57 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000000)="b06fd4f9a507a3569fff00000000000000000000004000"})
sendto$unix(r0, &(0x7f00000000c0)="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", 0x150, 0x240c0000, 0x0, 0x0)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)

10:06:57 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000600)="0f01870e000f01c8660f6135ba610066ed0f01ca660f3881a044000fc75d00f30f09640f01cf0f07", 0x28}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r7, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000140)={0x3f, 0x9, 0x4, 0x2000000, 0xff000000, {}, {0x1, 0x1, 0x9, 0x3, 0x1f, 0x6, "d2acb67e"}, 0x3, 0x6, @offset=0x9, 0x800, 0x0, <r8=>r7})
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000200)={0x42, 0x0, 0x3}, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_PROTOCOLS(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r9, 0x812, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x14}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x883743b79e0a25f2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x45010)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0x3, &(0x7f00000003c0)=[{0x8, 0xff, 0x8d, 0x3}, {0x28d1, 0x8, 0x0, 0xfffffffb}, {0x81, 0x20, 0xfd, 0x1}]}, 0x10)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00')
r11 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r11, 0x89a3, &(0x7f00000005c0)={'tunl0\x00', @ifru_flags=0x800})
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x959a8bdb0d2b77f7}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r10, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r11}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1722.498153][T23053] binder: 23044:23053 unknown command 1494644389
[ 1722.505093][T23053] binder: 23044:23053 ioctl c0306201 20000200 returned -22
10:06:57 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000000)="b06fd4f9a507a3569fff00000000000000000000004000"})
sendto$unix(r0, &(0x7f00000000c0)="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", 0x150, 0x240c0000, 0x0, 0x0)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)

10:06:57 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x5a, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a"], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:57 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000000)="b06fd4f9a507a3569fff00000000000000000000004000"})
sendto$unix(r0, &(0x7f00000000c0)="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", 0x150, 0x240c0000, 0x0, 0x0)

[ 1722.987578][T23158] binder: 23157:23158 unknown command 1494644389
[ 1722.994697][T23158] binder: 23157:23158 ioctl c0306201 20000200 returned -22
10:06:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
timer_create(0x4, &(0x7f0000000200)={0x0, 0x11, 0x2, @thr={&(0x7f00000002c0)="f04b8aa18fa78c043dfe08d981ea171560408a59f89306772d1ccbfa16a6e282dd0204c807996f361a855ec1dc0ecf3474b5f883ed0a71b8f8bb2a057e1fe9748d9328846c7432838e0bef9ebda721bcfb495de919e652e11fc2bbcaccb86237bd117775dc5780960cb9374799208fdf573806576a8753d07954ff4f9fb3ea6a2490f8b3619422acc919155ef55b07fd6389a0d6849f02b2a4aea23cefcb9898702e82f35446dfb2e35259e19607a34cdd63dabc6ee857844505", &(0x7f0000000140)="29a6a5afde909568f4934d16cbe7e6fb155209d176479a7c427c16df97822a72bba21b01cb08673649c92e45a52650218a8034ff0ec910e79e333fb2eb1dfeaaec975126a05b565f9efe03909f593a77f098a8d905826352cb0832d9f4df257bd3361ddae8aca6d3b51e6e67e4f3645234cebb59561844fe6629"}}, &(0x7f0000000240))
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:58 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$UHID_INPUT2(r4, &(0x7f00000002c0)={0xc, {0xa0, "bd79daedba6c49c0434d58b6c9bdce77fbcc9ca1d9192ac343648d9da0402ce7b2070363b0b8d3888c1c47020f541f7ed4d89a8493ca70f763dcd875cca92692d5bc53c58f20dd8e5a7137e6ef827f269f80df74721c71fc57ca713e3599bfcb414fcc7866df58bca930a351f5aca0c97591ecb9d290dd629e52465c417d20779ea14ea9757dff243968c22d50963239f2b17d71614ecdffb10f971630d06bf3"}}, 0xa6)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000140))
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r7, 0x0, r7)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:58 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000000)="b06fd4f9a507a3569fff00000000000000000000004000"})

10:06:58 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a4"], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1723.389692][T23185] binder: 23181:23185 unknown command 1494644389
[ 1723.396801][T23185] binder: 23181:23185 ioctl c0306201 20000200 returned -22
10:06:58 executing program 1:
ioctl$sock_ifreq(0xffffffffffffffff, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000000)="b06fd4f9a507a3569fff00000000000000000000004000"})

10:06:58 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a4"], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:58 executing program 1:
ioctl$sock_ifreq(0xffffffffffffffff, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000000)="b06fd4f9a507a3569fff00000000000000000000004000"})

[ 1723.829456][T23287] binder: 23285:23287 unknown command 1494644389
[ 1723.836217][T23287] binder: 23285:23287 ioctl c0306201 20000200 returned -22
10:06:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000140)=0xffffffcb)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x90)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={<r4=>0x0}, &(0x7f00000002c0)=0xc)
perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x9, 0x1, 0x8, 0x0, 0x0, 0x791099fb, 0x24005, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffe00, 0xb, @perf_config_ext={0x800, 0x4}, 0x4056, 0x5, 0x6, 0x9, 0x8, 0x0, 0x68d}, r4, 0xe, 0xffffffffffffffff, 0x8)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
fcntl$addseals(r5, 0x409, 0x1)

10:06:59 executing program 1:
ioctl$sock_ifreq(0xffffffffffffffff, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000000)="b06fd4f9a507a3569fff00000000000000000000004000"})

10:06:59 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a4"], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:59 executing program 1:
r0 = socket(0x0, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000000)="b06fd4f9a507a3569fff00000000000000000000004000"})

[ 1724.272716][T23304] binder: 23303:23304 unknown command 1494644389
[ 1724.279253][T23304] binder: 23303:23304 ioctl c0306201 20000200 returned -22
10:06:59 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x10000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r4, 0x4010ae74, &(0x7f0000000140)={0x9, 0xd576, 0x62b})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:06:59 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x63, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba"], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:06:59 executing program 1:
r0 = socket(0x0, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000000)="b06fd4f9a507a3569fff00000000000000000000004000"})

[ 1724.760283][T23416] binder: 23404:23416 unknown command 1494644389
[ 1724.767347][T23416] binder: 23404:23416 ioctl c0306201 20000200 returned -22
10:06:59 executing program 1:
r0 = socket(0x0, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000000)="b06fd4f9a507a3569fff00000000000000000000004000"})

10:07:00 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x63, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba"], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x200000, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x200042, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r5, &(0x7f0000000200)="0f10bb445a6a3d0052e8ef948b56b3888a4f79e7d814e0"}, 0x20)
r6 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x3, 0x6000, 0x1000, &(0x7f000005b000/0x1000)=nil})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0xffffffffffffff35, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000140)=0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1725.148266][T23436] binder: 23434:23436 unknown command 1494644389
[ 1725.155394][T23436] binder: 23434:23436 ioctl c0306201 20000200 returned -22
10:07:00 executing program 1:
r0 = socket(0x10, 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000000)="b06fd4f9a507a3569fff00000000000000000000004000"})

10:07:00 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x63, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba"], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1725.531095][T23451] binder: 23450:23451 unknown command 1494644389
[ 1725.537971][T23451] binder: 23450:23451 ioctl c0306201 20000200 returned -22
10:07:00 executing program 1:
r0 = socket(0x10, 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000000)="b06fd4f9a507a3569fff00000000000000000000004000"})

10:07:00 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x65, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d"], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797a314f8a2837f950f2da8817b7e381cee11d16858da79eee88ec2a72eca73d81bb69533350cd85ee598e4b8df0ac7aa5fd491378e5413d636af48606bc61f9e3bdb1f782477d78d9629d5a7a61d5aae27d790c6c4f6d3d6b60"], 0x52)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d0000ddd8dd0f0017c7442402c43a727fc7442406000000000f011424f30f09360f06c4c18d72d6830f01caed", 0x48}], 0x96, 0x11, 0x0, 0x2f0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socket$bt_cmtp(0x1f, 0x3, 0x5)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000228bd7000fbdbdf25080000007800040014000700080001001800000008000400030000000c00070008000100010000003400070008000200050000000800040080000000080003000800000008000400ffffffff080002000900000008000400040000000c000700080003000200000014000700080001001900000008000300050000003c0002000800010004000000080001000000002008000200ffff000008000100010000000800010008000000080002000500000008000200090000000800068004000200440009000800010000000000080002000002000008000200040000000800020000200000080002003d0000000800020007000000080001000001000008000100530e0000"], 0x114}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
ioctl$VIDIOC_SUBDEV_S_CROP(r5, 0xc038563c, &(0x7f0000000140)={0x3, 0x0, {0x4, 0xff, 0x35b, 0x3ff}})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r7, 0x0, r7)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x80c, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:01 executing program 1:
r0 = socket(0x10, 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000000)="b06fd4f9a507a3569fff00000000000000000000004000"})

[ 1725.987999][T23521] binder: 23519:23521 unknown command 1494644389
[ 1725.994685][T23521] binder: 23519:23521 ioctl c0306201 20000200 returned -22
10:07:01 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x65, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d"], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:01 executing program 1:
socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000000)="b06fd4f9a507a3569fff00000000000000000000004000"})

[ 1726.372454][T23572] binder: 23570:23572 unknown command 1494644389
[ 1726.379055][T23572] binder: 23570:23572 ioctl c0306201 20000200 returned -22
10:07:01 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3c)
ptrace$cont(0x7, 0xffffffffffffffff, 0x2, 0x1)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x3}, r3, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:01 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x65, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d"], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:01 executing program 1:
socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000000)="b06fd4f9a507a3569fff00000000000000000000004000"})

10:07:01 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f00000002c0))

[ 1726.741574][T23584] binder: 23583:23584 unknown command 1494644389
[ 1726.748771][T23584] binder: 23583:23584 ioctl c0306201 20000200 returned -22
10:07:01 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000140)="66baf80cb82d3ce186ef66bafc0cecc744240003010000c744240200000000ff2c24640f639e09000000410f01bb0600000066baf80cb8a099e788ef66bafc0cb800200000eff4f0809ce300c0000000b8010000000f01d91b794866ba200066ed", 0x61}], 0xaaaaaaaaaaaacfd, 0x2, 0x0, 0xffffffffffffffc3)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket(0x2, 0x3, 0x2)
getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, 0x0, &(0x7f00000000c0))
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:01 executing program 1:
socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000000)="b06fd4f9a507a3569fff00000000000000000000004000"})

10:07:02 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000000)="b06fd4f9a507a3569fff00000000000000000000004000"})

10:07:02 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(0x0, 0x1ff)

[ 1727.256796][T23663] binder: 23651:23663 ioctl c0306201 20000200 returned -14
10:07:02 executing program 4:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x12b000, 0x0)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:07:02 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000000)="b06fd4f9a507a3569fff00000000000000000000004000"})

10:07:02 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(0x0, 0x1ff)

10:07:02 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="36400f01c9b94a0b00000f3266baa100ec460f01f866ba610066edc4c219ded0c441fc53a600000000470fb9620767430f001b0f0f2e1d", 0x37}], 0x1, 0x0, 0x0, 0x0)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KDENABIO(r6, 0x4b36)
fcntl$dupfd(r4, 0x0, r4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r7, 0x0, r7)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000180))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1727.703828][T23720] binder: 23718:23720 ioctl c0306201 20000200 returned -14
10:07:02 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000000)="b06fd4f9a507a3569fff00000000000000000000004000"})

10:07:02 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:03 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(0x0, 0x1ff)

10:07:03 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, 0x0)

10:07:03 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
recvfrom$inet6(r5, &(0x7f0000000180)=""/35, 0x23, 0x40000143, 0x0, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r1, 0xae80, 0x0)
syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x7fffffff, 0x400)
readv(r5, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1)

[ 1728.179279][T23834] binder: 23833:23834 ioctl c0306201 20000200 returned -14
10:07:03 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000180)={0xa, {0x6, 0x7, 0xfe}}, 0xa)
r5 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
openat(r5, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x3, 0x41002)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x80000, 0x0)

10:07:03 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, 0x0)

10:07:03 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x0)

10:07:03 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, 0x0)

[ 1728.644038][T23850] binder: 23849:23850 ioctl c0306201 20000200 returned -14
10:07:03 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x0)

10:07:03 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f)
ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000002c0)={0x0, @bt={0x1, 0x200, 0x1, 0x5, 0x3ff, 0x3f800000, 0xff, 0x80000001, 0x4, 0xe4, 0x1, 0x1, 0x6, 0x3ff, 0x0, 0x20, {0x4, 0x9}, 0x0, 0x89}})
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$dupfd(r5, 0x0, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x80000020, &(0x7f0000000180)={0xa, 0x4e21, 0xf4, @local, 0x6}, 0x1c)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1728.943755][T23858] binder: 23855:23858 ioctl c0306201 20000200 returned -14
10:07:04 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})

10:07:04 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x0)

[ 1729.310440][T23901] binder: 23894:23901 ioctl c0306201 20000200 returned -14
10:07:04 executing program 1 (fault-call:1 fault-nth:0):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})

10:07:04 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000140)=0x1, 0x8)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x4e}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r5 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r7, 0x0, r7)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000000000002004e22ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e6e66c883ecb30012700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002004e24e000000100"/276], 0x110)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))

10:07:04 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="094179b8000000", @ANYRES32=<r4=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r4}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={r4, 0x2c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, @in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000200)=0x10)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r7, 0x0, r7)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = fcntl$dupfd(r10, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
ioctl$VIDIOC_S_PARM(r11, 0xc0cc5616, &(0x7f00000002c0)={0x1, @output={0x1000, 0x1, {0x7, 0x1}, 0x1, 0x800}})

10:07:04 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000080)={'veth1_to_team\x00', @ifru_data=0x0})
ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f00000001c0)={0x6000, 0x4000, 0xfffffff9, 0xff, 0x3})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'team_slave_1\x00', {0x3c3}, 0x1})
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x220100, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00')
socket(0x1e, 0x4, 0x7f)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f00000002c0))
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00')
sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2010060}, 0x2, &(0x7f0000000180)={&(0x7f0000000140)={0x28e, r4, 0x400, 0x70bd25, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'vcan0\x00'}}}, [""]}, 0x348}, 0x1, 0x0, 0x0, 0x810}, 0x8000900)

10:07:04 executing program 2 (fault-call:2 fault-nth:0):
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1729.974957][T23987] binder: 23986:23987 ioctl c0306201 20000200 returned -14
10:07:05 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x250002, 0x0)
ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x3)

10:07:05 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000059000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x4e}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=<r5=>0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, r5, 0x10000000, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r7, 0x0, r7)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

10:07:05 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/135, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:05 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000200)="0f18a29fe6cbbfbcbc734914860cda8ec6f00a1f1d5722f493f9c57aa1322c2666cf9800fadd6ff19bd392fc052d148240b3e9", 0x33, 0xfffffffffffffffa)
keyctl$update(0x2, r3, &(0x7f0000000240)="cb3843e33a46cca555498e3ee6fd2a408cbeaa7820843353e4284d646f72c07338bd4a5265764f87703116c7423ab411a62962aebc7c", 0x36)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:05 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0)

[ 1730.468913][T24019] binder: 24007:24019 ioctl c0306201 20000200 returned -14
10:07:05 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="dfffffffffffffff"], 0xffffffffffffffc3, 0x0, 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
io_setup(0x3, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0xffffffda}])
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x1c0000, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
io_submit(r2, 0x2, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7fff, r3, &(0x7f0000000040)="8bbebf7e600f0e990400d330f786b8f688dce66dfd7a6863076fdd32ee529c41a6b49c1c20b590499cf4fbad4afbfa54a05d2a50b99ad7201993e29c7c6170347615eb04d4e0773e012c5e0694cb4ffc3524b8d80efc1a8428fd3b322132449727f561ceb5", 0x65, 0x2, 0x0, 0x2, r5}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7ff, r0, &(0x7f0000000180)="b174aa5bbd158ae3d3e14025840ecc7afdf41e656a4d05f53d2c00632c657892a08174e258131625fcca168b3008fca23429ae09fc291a808e9b4f7dab75f9c2c33a2ce22294b4d46504658fe543df94133f1f8810d9", 0x56, 0x5}])
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x701040, 0x0)
open_by_handle_at(r6, &(0x7f0000000300)={0x6e, 0xff, "0956383fcf6d2b45c7374b18b4849735b00356753fc5dd94dd57773fd2f81adef0cfcfd39588cc954f5bd49c456058d312551f2efaee475aeaaab08a74c60e62320d69b4d1099b0071c7c1c8cd6bd3be2e67c9f8a438347fab81758738e831851b294f536b99"}, 0x0)

[ 1730.612521][T24073] binder: 24058:24073 ioctl c0306201 20000200 returned -14
10:07:05 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e713ed61870584b4f4429e7df26e2b1684780ac3b0393c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f00000000000000"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:05 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0)
r4 = mmap$binder(&(0x7f0000051000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x7fff)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x94, 0x0, &(0x7f0000000380)=[@clear_death={0x400c630f, 0x1}, @enter_looper, @dead_binder_done, @acquire, @acquire_done={0x40106309, 0x2}, @free_buffer={0x40086303, r4}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/68, 0x44, 0x0, 0x28}, @fda={0x66646185, 0x5, 0x2, 0x21}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000340)={0x0, 0x28, 0x48}}}, @release={0x40046306, 0x2}], 0x3, 0x0, &(0x7f0000000440)="78d38d"})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r7, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r8 = dup3(r7, 0xffffffffffffffff, 0x80000)
ioctl$CAPI_GET_SERIAL(r8, 0xc0044308, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:05 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
keyctl$session_to_parent(0x12)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x5}, &(0x7f0000000040)=0x8)

10:07:05 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x1, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x1)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x1f)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1730.878786][T24153] binder: 24150:24153 ioctl c0306201 20000200 returned -14
10:07:06 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7d0781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1731.118496][T24171] Unknown ioctl -1070571007
10:07:06 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000000)=""/36)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)=<r4=>0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x2, 0x9}, r4, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r7, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r8, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000400)={0x1, [<r11=>0x0]}, &(0x7f000095dffc)=0xfffffffffffffed5)
setsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000000)={r11}, 0x10)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000002c0)={<r12=>r11, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e23, @empty}]}, &(0x7f0000000300)=0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000340)={r12, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0xea73, 0x5}, 0x90)
fcntl$dupfd(r6, 0x0, r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1731.257418][T24185] Unknown ioctl -1070571007
[ 1731.303914][T24233] binder: 24231:24233 ioctl c0306201 20000200 returned -14
10:07:06 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x80000, 0x0)
r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
dup2(r2, 0xffffffffffffffff)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3c)
ptrace$cont(0x18, r3, 0x0, 0x0)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f00000004c0)={0x3, &(0x7f0000000480)="5db273e0ba"})
tkill(r4, 0x3c)
ptrace$cont(0x18, r4, 0x0, 0x0)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r4, 0x0, 0x0)
r5 = clone3(&(0x7f0000000400)={0x80002000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x2}, &(0x7f0000000200)=""/138, 0x8a, &(0x7f00000002c0)=""/226, &(0x7f00000003c0)=[0x0, 0x0, r4, r3, r3, 0xffffffffffffffff], 0x6}, 0x50)
ptrace$setregs(0xd, r5, 0xffffffff, &(0x7f0000000080))
ptrace$cont(0x20, r3, 0x0, 0x0)
r6 = syz_open_procfs(r3, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00')
ioctl$VIDIOC_S_PRIORITY(r6, 0x40045644, 0x1)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10)

10:07:06 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={<r2=>0x0, 0x1000, "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"}, &(0x7f0000000000)=0x1008)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r2, 0x6}, 0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=[@acquire], 0xffffffffffffffc3, 0x0, 0x0})

10:07:06 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x9, 0x6, 0x1, 0xfffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r7 = socket(0x11, 0x800000003, 0x0)
bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a60000009ce80000e0ff000000", @ANYRES32=r8], 0x2}}, 0x0)
connect$packet(r4, &(0x7f0000000200)={0x11, 0x17, r8, 0x1, 0xc5, 0x6, @dev={[], 0xc}}, 0x14)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r9, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
getsockopt$inet6_dccp_int(r9, 0x21, 0x10, &(0x7f0000000140), &(0x7f0000000180)=0x4)

10:07:06 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r5 = fcntl$dupfd(r4, 0x605, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:06 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = accept4(r1, &(0x7f0000000480)=@x25, &(0x7f0000000500)=0x80, 0x80000)
r3 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000640)={r3, r1, 0x0, 0xdb, &(0x7f0000000540)="6327d1b42aa12b54691f7c3907f3fa9ff4fb9306b0d00973df727b72d0a74182de217143a8c03c9a11315711884c984dcdffd656f3da420bbe5ef95d8c6716d65373f95f93a56ba09be8b35ce58030296ceef0ad63ad07e8560b064a9aa4d85c584f011f8b4d777c230b83a4a1e33ee31160c06faca77d5061fba06cbf8dee3c6a858fd6beba8baa8ecec071f1a07d2c9ba4b4f49c968e4e4a12aa55aef029bbfe37404642254087b809904b1e925f483aa74d27a65d1da445102acf3194c978b5fbb47453765249ad3077c7c6470a5ee0e24f0c085344f39a8ed0", 0x0, 0x7, 0x3ea, 0x8, 0x2, 0x3, 0x7, 'syz1\x00'})
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r8, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="0100000039e55d4b21307342c22b562c43578a4a778c864f031194604908dca906e1cc7413f713d50489c5f9eaff336d989f1c52618f914c3b6c442b2f969ee9c994145eb6f3f92c8111d0056752ac885c91b2f25dffaf3ddc46fdc1de110bff8bff09a04a0a68ccb895a3803b25f107e583f0f3363fc86bdc413cf396d6c4bf65a2eae9c43e9ec4993b0a8ddb0c37edd2096dbc96cce0822a618a782b9857651a39bd967295782af88a4b113d96f257ffedcafebba437aab18d66e0c8d00a829119673ba5d2fff5530287e7f92a4e144b34cfb5ec5a45952c", @ANYRES32=<r11=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000000)={r11}, 0x10)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000001c0)={<r12=>r11, 0x6}, &(0x7f0000000840)=0x8)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000880)={r12, 0x2}, &(0x7f00000008c0)=0x8)
ioctl$sock_ifreq(r7, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r7, 0x110, 0x5, &(0x7f0000000700)=[0x0, 0x4], 0x80000000000002a7)
r13 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r13, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1731.649054][T24302] binder: 24282:24302 ioctl c0306201 20000200 returned -14
10:07:06 executing program 1:
openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040))
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x8913, &(0x7f0000000080)={'gre0\x00', @ifru_settings={0x80, 0x664, @fr_pvc=&(0x7f00000000c0)={0x20}}})
openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x10000, 0x0)

[ 1731.860550][T24348] binder: 24333:24348 ioctl c0306201 20000200 returned -14
10:07:07 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000480)='/dev/urandom\x00', 0x0, 0x0)

10:07:07 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xf756}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}, 0x0, 0x0, r4, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:07 executing program 1:
r0 = socket(0x10, 0x448c22611ad0e4b4, 0x6)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})

10:07:07 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0})

10:07:07 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x40000, 0x0)
r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x100000, 0x0)
r6 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x81, 0x241100)
ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000063000/0x4000)=nil})
ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000200)={0x3, r5})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1732.309694][T24472] binder: 24471:24472 ioctl c0306201 20000200 returned -14
10:07:07 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f00000000c0)=""/204, &(0x7f0000000000)=0xcc)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})

10:07:07 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$caif_stream(0x25, 0x1, 0x0)
getsockopt$SO_TIMESTAMP(r4, 0x1, 0x63, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r5 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$EVIOCSABS2F(r5, 0x401845ef, &(0x7f0000000180)={0x7, 0x80000000, 0x9, 0x1, 0x8, 0x1})
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xfffffffffffffbfe, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_FONT(r8, 0x4b60, &(0x7f0000000000)=""/36)
ioctl$KDGETLED(r8, 0x4b31, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1732.514709][T24501] binder: 24489:24501 unknown command 808464432
[ 1732.521226][T24501] binder: 24489:24501 ioctl c0306201 20000200 returned -22
10:07:07 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000080)={'batadv0\x00', @ifru_hwaddr=@broadcast})

10:07:07 executing program 0:
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)

10:07:08 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x8000, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
write$tun(r3, &(0x7f00000002c0)={@void, @val={0xbb39af87571e747c, 0x3, 0xc1d1, 0x8, 0x1, 0x9}, @ipx={0xffff, 0xee, 0x3, 0x0, {@current, @current, 0x241}, {@current, @current, 0x3}, "ce454ce5a882493ffcb93944cb04bccf61dc17f56887c16a3479bf22948791a9f59f16f4a71c8e74dc3b6f94730d248ff9c9231ab2134be8a2e28fcfed1cd6ac85c0dac70c9933ced8e23324123af335cad6395ea53e033d9cf96ed15d09f32fc71eb0c11e8ccaac3250977447bafcc61e36cc79ee9a8bd3dac264b14424de99f90cabb2ad31048e74dd0db0c601ebcb36bfe7347d575c1d8a98fbf8fbe9d37be66a7370735c31b1cdb8ec7b25a73d85e23cb4b5c9de707489baddf9bd431ad1ea78d638147e05cd12dd03a464feb0a2"}}, 0xf8)
ioctl$KVM_NMI(r2, 0xae9a)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000200)={[{0xaa, 0x400, 0x3, 0x2, 0x7f, 0x1, 0x7, 0x8, 0x1, 0x9, 0x9, 0x8, 0xfffffffffffffe01}, {0x3, 0x64f9, 0x7, 0x2, 0x8, 0x3, 0x20, 0x8, 0xa0, 0x0, 0x7, 0x5, 0x10001}, {0x2, 0x1, 0x80, 0x7, 0xff, 0x9a, 0x7, 0x0, 0x3, 0x88, 0x81, 0x7, 0x7fff}]})
fcntl$dupfd(r4, 0x0, r4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:08 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x0, 0x7fffffff, 0x0, 0x9, 0x6, 0x40000, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x108, 0x80, 0x0, 0x176, 0x324, 0x7, 0x2df, 0x8}, "62ff4558c88895a582d675041f9131023d6bd04224843264f7103c580f27c3f8baa56dfb936b04a8d5c48797affaa76c7e042e9296efc93a1a93a0810a29d0ad7d7c207361875b3dfa30a70ec4d29ce8a7b9f71ab63d88828ac3af9fbd0e913de0a1c4022a2d229d9a97f00309d2c336633939d13fc1c6db60e87d6bb3fe252dd1ea72c4ec62200f04b9fbf57d622557a145bf265f8a32345a3a828f712613187a80", [[], []]}, 0x2c2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x1a1000, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r6, 0xc008551c, &(0x7f0000000200)=ANY=[@ANYBLOB="e800cf0010000000ff9fffff040000000400000000410000"])
fcntl$dupfd(r5, 0x0, r5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:08 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfba, 0x100000000, 0x0, 0x0, 0x8, 0xa, "61031e6912124c64a21eddacd66f79a1914ecddac5fd0e72a5aa82ab44da2ac492358aed45208527ba9ad35e386acd94e2f81cdddaf5465e7c7b7926c5d80efa", "326fa0d9128e3b74325f7d97f499dbaf8d869cac0abf892acc7c6cd6182956fa4d2fd8777509b102b494fc439494111773c86cfeb23bffce761d7b70a5fc7f67", "57ad7bcb0eae883a6be5f36d723a29499ad2b75d82440468fc34684e9fdb3adb", [0x80000001, 0xfffffffffffffffc]})

10:07:08 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x7, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x200, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727f0f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x4e}], 0xaaaaaaaaaaaab55, 0x48, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000200)={0x4, [<r6=>0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x14)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000002c0)={r6, 0x80000001, 0x20}, &(0x7f0000000300)=0xc)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r7, 0xae80, 0x0)

10:07:08 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12d691de7ef18856"], 0xffffffffffffffc3, 0x0, 0x0})

[ 1733.407891][T24623] binder: 24622:24623 ioctl c0306201 20000200 returned -14
10:07:08 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000340)={0x653ffff, 0x8, 0x6, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x1a409be, 0xffff, [], @p_u32=&(0x7f00000001c0)=0x4034}})
sendmsg$nl_crypto(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@alg={0xf0, 0x10, 0x100, 0x70bd2b, 0x25dfdbfe, {{'xchacha20-neon\x00'}, [], [], 0x800, 0x3000}, [{0x8, 0x1, 0x9}, {0x8, 0x1, 0x3f}]}, 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r3 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=[@acquire], 0xffffffffffffffc3, 0x0, 0x0})

10:07:08 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000140))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000066000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000180)="c4e37904c64b0f09c4c27d0f2f80c66a650f01ca66b8a6008ec0c4e13d657100360f1c8700300000c4e2999254b24ab97f030000b800080000ba000000000f30", 0x40}], 0x1, 0x0, 0x0, 0xffffff1f)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f0000000200)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r7, 0x0, r7)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r6, 0xae80, 0x0)

10:07:08 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000005d000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x4e}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0)
ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
sendto$inet6(r5, &(0x7f0000000200)="625d98a2f39885d5186a74821cd140d3fd59f1a11da164fcf10fda9019b8f93c84f03f7d5d2ee8b6e81d06a8928378972951b2d50aad896dadbe1db39bcd5f02b6156ed1cab35e7daa", 0x49, 0x4, &(0x7f00000002c0)={0xa, 0x4e20, 0xfffffff7, @mcast1, 0x11}, 0x1c)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:08 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:09 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0)='l2tp\x00')
r3 = socket(0x10, 0x3, 0x0)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, r4, 0x23}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r4, 0xb08, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x40}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xc8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x2}]}, 0x3c}}, 0x20000000)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r8, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:09 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0xff)
r2 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=[@acquire], 0xffffffffffffffc3, 0x0, 0x0})

[ 1734.057065][T24736] binder: 24735:24736 ioctl c0306201 20000200 returned -14
10:07:09 executing program 1:
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000680)={0x9e0000, 0x80, 0x5, <r0=>0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x980001, 0x9, [], @string=&(0x7f0000000600)=0x1f}})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x80, 0x60)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000b00)=<r3=>0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000b40)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000c40)=0xe8)
r6 = geteuid()
getresgid(&(0x7f00000000c0), &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000140))
lchown(&(0x7f0000000080)='./file0\x00', r6, r7)
r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/ttyprintk\x00', 0x20183, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = fcntl$dupfd(r9, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
r11 = open_tree(r10, &(0x7f0000000f40)='./file0\x00', 0x1000)
r12 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r12, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r14 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r14, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r15 = getpid()
statx(0xffffffffffffffff, &(0x7f0000000f80)='./file0\x00', 0x100, 0x8, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, <r16=>0x0})
getresgid(&(0x7f00000010c0), &(0x7f0000001100)=<r17=>0x0, &(0x7f0000001140))
r18 = clone3(&(0x7f0000003280)={0x8000000, &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000001200), {0x31}, &(0x7f0000001240)=""/4096, 0x1000, &(0x7f0000002240)=""/4096, &(0x7f0000003240)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3}, 0x50)
stat(&(0x7f0000003300)='./file0\x00', &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, <r19=>0x0})
r20 = getegid()
r21 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r21, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r22 = memfd_create(&(0x7f00000033c0)='virt_wifi0\x00', 0x6)
r23 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r23, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r24 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r24, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r25 = accept4$tipc(r24, &(0x7f0000003400), &(0x7f0000003440)=0x10, 0x800)
r26 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003480)='/dev/ptmx\x00', 0x103301, 0x0)
r27 = syz_open_dev$sndctrl(&(0x7f00000034c0)='/dev/snd/controlC#\x00', 0x7, 0x20000)
r28 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r28, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
ioctl$sock_FIOGETOWN(r28, 0x8903, &(0x7f0000003500)=<r29=>0x0)
r30 = geteuid()
getresgid(&(0x7f00000000c0), &(0x7f0000000100)=<r31=>0x0, &(0x7f0000000140))
lchown(&(0x7f0000000080)='./file0\x00', r30, r31)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003a00)={<r32=>0x0}, &(0x7f0000003a40)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003a80)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r33=>0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000003b80)=0xe8)
r34 = getegid()
r35 = getpgrp(0x0)
lstat(&(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00)={0x0, 0x0, 0x0, 0x0, <r36=>0x0})
r37 = geteuid()
getresgid(&(0x7f00000000c0), &(0x7f0000000100)=<r38=>0x0, &(0x7f0000000140))
lchown(&(0x7f0000000080)='./file0\x00', r37, r38)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003cc0)={0x0, <r39=>0xffffffffffffffff, 0x0, 0xb, &(0x7f0000003c80)='virt_wifi0\x00', 0xffffffffffffffff}, 0x30)
r40 = socket$pptp(0x18, 0x1, 0x2)
r41 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003d00)='cgroup.subtree_control\x00', 0x2, 0x0)
r42 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r43 = syz_open_dev$ndb(&(0x7f0000003d40)='/dev/nbd#\x00', 0x0, 0x149295c27fb56eeb)
r44 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r44, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r45 = socket$can_raw(0x1d, 0x3, 0x1)
r46 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r46, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000004200)={0x4, 0x22, 0x0, <r47=>0xffffffffffffffff})
r48 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r48, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r49 = socket$nl_route(0x10, 0x3, 0x0)
r50 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r50, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r51 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r51, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r52 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r52, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r53 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r53, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
sendmmsg$unix(r0, &(0x7f0000004280)=[{&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000740)="dadea11a9d616fa5fef417adad3024b33c25df67007a8e8285854ba248adb6", 0x1f}, {&(0x7f0000000780)="b3f77ba1bc01c7144e4a9aa555f69e8c7313574529f143064df4435f354be2448516e88b2718f76e3acd01a51b175cac332e719e9ea6f83987c9a244289e714f718bd7e68539dccc815d2d4977760067ea", 0x51}, {&(0x7f0000000800)="249964d48f2a8b6eb68fd6a4d24bd6fba0cbdfb1c77577ba54aacaa4c6bbcbf196b47ea72621e36e4104487a20d8811445e85ac2d4b5febd0b6fc46864b586de11c62a2d841da2ab18eb9d0531868f50da994661b714cd6254f040443c1a25f251f922c57721d87825ff749823ba4a709a91ca2922b680146f88351c5746ddc222abde736f4a6a178db2495d57f99b23d3d67f1269d404272a4a71c8748a8142afd67a3012021e1fc81eda22d924f7262eb9444ec632e660f62792aa92ea1e53044f0b298a6195c41d03a3ff7523c2", 0xcf}, {&(0x7f0000000900)="045c785747f38d165d1c68", 0xb}], 0x4, 0x0, 0x0, 0x8000}, {&(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000a00)="57bcc6a3f936193b9cc27ae7ade71372f6e31942", 0x14}, {&(0x7f0000000a40)="0d7a81ea9b936b5070adcb68b4c6202a757658535cfa80e47d71f647d8b0d9fd8a9f616a9d", 0x25}], 0x2, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r3, r5, r7}}}], 0x38, 0x20000005}, {&(0x7f0000000cc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000d40)="29742fb02a877cf9b5c1d73a6d42f6315c4fc9ee1b0891771c86c85887692cc8e413622cad6a91801268b0306b8d083f7f4c6568dace1f21cc2dfb16a77d", 0x3e}, {&(0x7f0000000d80)="4d4b19f2109cd80c0d38242743306cfe73d7481b", 0x14}, {&(0x7f0000000dc0)="a12283bc27796dc43012710e8ef2037ed95b4dcaae75a4c8acaeb793e9a41dca462f2b34aec08a864c84138e41677264290c18454a8bbcaf73a0c90b97ae0d95281fba9b62a9c3ef755eafe3e1af049f4fb15b760d150f51213be2bc7d", 0x5d}, {&(0x7f0000000e40)="a59a8da1c38e20c479fc6542c16224ba424c17e3a64d53eab5754bc4d22ea0291d4ec6d0ba99f8e34136e2c0cbee0911567ca6e7d49e07cb7e2d89c141578d69034d60", 0x43}], 0x4, &(0x7f0000003540)=[@rights={{0x28, 0x1, 0x1, [r8, r11, r12, r13, 0xffffffffffffffff, r14]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @rights={{0x18, 0x1, 0x1, [r21, r22]}}, @rights={{0x20, 0x1, 0x1, [r23, r25, r26, r27]}}, @cred={{0x1c, 0x1, 0x2, {r29, 0x0, r31}}}], 0xc0, 0xc0000}, {&(0x7f0000003600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003980)=[{&(0x7f0000003680)="849116b9eebec9244f2f339440b130b100edaaaec34866fb4c343f", 0x1b}, {&(0x7f00000036c0)="65f61a022a9ee36a9108d8df9173cf2c21209ae8819a4a01118dd746304aa7a4922013f91b44e472ab8c452856ff0196a03e1a73b7cfe2e4af404ce66624b199fcd9dbdafa3bc6fc5e6dddcd7bf86dd2598bab3da1185d24c721b0798dca16044de88419e1c6bcad119e409f3c45123df73b1b4a4e1ce2ca12dd9b51d4e1dbb58faf694607fbf6ee0937319ce0a14c5a454cad687bf89073b4426bf7c1038e5d335d6b30b3324ce28edb61", 0xab}, {&(0x7f0000003780)="ca8816951cd976383f150ba075e9dafe5c5b04cb1a9b3b784193575eeff53a9e", 0x20}, {&(0x7f00000037c0)="5dfa12e70b6712", 0x7}, {&(0x7f0000003800)="4f92f766326bcc374d9eb9cf4af35cd2e5e61f587b172dfa8e02aab710e1c03cdb41ea7a251889d5d76b3c65b2678334d0ab5f67c551ad76", 0x38}, {&(0x7f0000003840)="dbca5df7e62c54e34129525b24501dccb50b02a4d6d8e4cc8b78b8c521f0d5f9288bd0674a5cf5e025131ab38792f7b88a697f516a6546", 0x37}, {&(0x7f0000003880)="055fe5eba4a422260d391c256e78b4a2b450781e2f3226d40095279ac04158c795554b7a90d79d3f8d5d1b047b8b380917656010412657915709de6833f67de48031817756dd059011d0e3be002281eda3a24ddc48e7451c8b9c2aad6f7998f3152ab75b4dd220af40404d02af4bf5f70990bea744f1f3b6ec653ac63f4b62b8d02733fe68f7fc01d9f9feede0b2abf89186f957260b358bf99067e4602a74d910c3d243843713510a88d44d35bd9f333de31b4177c40c672b12a60a04b31ab4855fe5aeeaa71b4b82079554ef312a570f083087", 0xd4}], 0x7, &(0x7f0000003d80)=[@cred={{0x1c, 0x1, 0x2, {r32, r33, r34}}}, @cred={{0x1c, 0x1, 0x2, {r35, r36, r38}}}, @rights={{0x2c, 0x1, 0x1, [r39, r40, 0xffffffffffffffff, r41, 0xffffffffffffffff, r42, r43]}}, @rights={{0x1c, 0x1, 0x1, [r44, r45, r46]}}], 0x90}, {&(0x7f0000003e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004180)=[{&(0x7f0000003ec0)="4e1332da2a7cd8f38ed58c9966c85b84f67eada02c3185179d22a697cd99e7626de40f9f73a549f18cb57f5d5b25f9736d066e71d436a262678864e4dad84586677e6355af312a9fb6f951c2634487d30ef7434f275fb4272e98aee70906b02acc860637ea96eb40610c54f061e9c4e8916bde6874c10c6fd183ba2566f6d4c8bea3dcc548398f84f816727b", 0x8c}, {&(0x7f0000003f80)="484f2d262e1254e77e83e905bb", 0xd}, {&(0x7f0000003fc0)="5d54b5751c3ef387e2866531148f5357ccadd8e74413834ae16d26ee6f27d036d319f2d2d742c5ca6807b1c183624cbb12c8914eb70fdc1dda0358d2aa0f44febb1624f78468dc1a20ff9ed9be278557", 0x50}, {&(0x7f0000004040)="0dae9b3610ce25a3189c16d8645d38f9aafa17effedf7d06a0da548746bab959c2a926bfc676dfdecabd5cbf9a7f06d25421195e2c8e83276bac3bdbc66c395801b25653d4510d4c5ba685cd4db4e71e57fa9ad7970651726420845ef88642f568eb9cb2817597ba33b58046c9d0208f0aaa47d50a931d4667fb2e203be0a6b2c1d9445a0c6a8f3eeb0d793894d05e54319f22d7d3664f407f32b5c5ca2045a1335041f48088ac605a38b8c5253b75294d36238d7575", 0xb6}, {&(0x7f0000004100)="ec32127d1dbd9cd62d94e9e567fa07af6e50496035da5c7ec651", 0x1a}, {&(0x7f0000004140)="d0a5", 0x2}], 0x6, &(0x7f0000004240)=[@rights={{0x20, 0x1, 0x1, [r47, r48, r49, r50]}}, @rights={{0x1c, 0x1, 0x1, [r51, r52, r53]}}], 0x40, 0x8}], 0x5, 0x800)
r54 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r54, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})

10:07:09 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e5080ac3b03933f85d1f0a8a563c7e7e6781468bfb14d01da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc7846029e2f4285c3eda132aac7e49c39dfc391ac6aeded5d122ebe92505799452370caccf1f864500"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:09 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="88453ec9727ffa0d5b2236b46ee813b0eadb159e0c1999f335efb0f59ea842d495418a1e94ab370e8d7e98834209ca5a2d1e69c21a772ff5d186c8ebcf9ca095d7c70836de2cd03b362c"], 0xffffffffffffffc3, 0x0, 0x0})
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r2 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, 0x0)
dup2(r1, r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_FONT(r10, 0x4b60, &(0x7f0000000000)=""/36)
ioctl$TIOCGSERIAL(r10, 0x541e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/209})
r11 = fcntl$dupfd(r9, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, &(0x7f00000002c0)={0x0, <r12=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r13=>0x0}, 0x6cf079aebe1eb636)
ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000100)={0xad08, 0xb4, {r12}, {r13}, 0x80000000, 0x4})

10:07:09 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000140))
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000180)='syz_tun\x00')
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[ 1734.601082][T24860] binder: 24858:24860 ioctl c0306201 20000200 returned -14
10:07:09 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
modify_ldt$read(0x0, &(0x7f00000002c0)=""/185, 0xb9)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x0, 0x2, 0x2})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000180), &(0x7f0000000200)=0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1734.649962][T24861] binder: 24859:24861 ioctl c0306201 20000200 returned -14
10:07:09 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$SNDRV_PCM_IOCTL_XRUN(r4, 0x4148, 0x0)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:10 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r6, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000480))
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:10 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000200)='./bus\x00', 0x2000, 0x40)
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000240)=0x200, 0x4)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x82, 0x0)
sendto$inet(r7, &(0x7f00000002c0)="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", 0x1000, 0x800, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:10 executing program 1:
r0 = socket(0xd, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x15720, &(0x7f0000000000)={'virt_wifi0\x00', @ifru_data=0x0})
r1 = socket(0x10, 0x3, 0x0)
modify_ldt$read(0x0, &(0x7f0000000100)=""/21, 0x15)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000000c0)={0x2, 'batadv0\x00', {0x200}, 0x20})
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000140)={0x2, 'veth1_vlan\x00', {0x632871e9}, 0x20})
fchdir(r1)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x25}, 0x9, 0x2, 0xff, 0x1, 0x5, 0x1}, &(0x7f0000000080)=0x20)

[ 1735.198088][T24967] binder: 24962:24967 ioctl c0306201 20000200 returned -14
10:07:10 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
accept$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:10 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x7, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0})
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

10:07:10 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
mmap$perf(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r5, 0x101)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0xc0a, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x500200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket(0x400000000010, 0x2, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
write(r9, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
r10 = fcntl$dupfd(r8, 0x0, r8)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
read$snddsp(r12, &(0x7f00000004c0)=""/208, 0xd0)
getpeername$l2tp(r7, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000600)=0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r10, 0x6}, 0x10)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000100)={0x1})
r13 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x400, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(r13, 0x5016, 0x0)

10:07:10 executing program 1:
r0 = socket(0x46d4f1b06ec5a17a, 0x800, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})

10:07:10 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x400000, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f00000002c0)={0xc06964987a07d32a, @output={0x1000, 0x0, {0x6, 0x1ff}, 0x9, 0x2}})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x8, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:10 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000140)=0x1f)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:11 executing program 1:
r0 = socket(0x9, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'vlan0\x00', @ifru_addrs=@l2={0x1f, 0x7fff, {0x80, 0x81, 0x1, 0x90, 0xff, 0x1}, 0x2, 0x6}})

10:07:11 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, [0x237, 0x7, 0x1, 0x200]})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:11 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f8dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:11 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r4 = fcntl$dupfd(r2, 0x406, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VT_RELDISP(r4, 0x5605)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:11 executing program 0:
openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000000c0))
syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)

[ 1736.657304][T25289] binder: 25280:25289 ioctl c0306201 20000200 returned -14
10:07:11 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc)

10:07:12 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x10, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000400000c6300000d630000"], 0x0, 0x0, 0x0})

10:07:12 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1737.015232][T25345] binder: 25344:25345 ioctl c0306201 20000200 returned -14
10:07:12 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x93ccb65de62932db, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = fcntl$dupfd(r9, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$VIDIOC_DQBUF(r10, 0xc0585611, &(0x7f0000000140)={0xffffffff, 0x7, 0x4, 0x20000000, 0x9, {0x77359400}, {0x5, 0x8, 0xfe, 0x6, 0xfc, 0x0, "e0e4dc84"}, 0x6, 0x0, @offset=0x6d81, 0x1})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x40000000000008)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r14 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r14, 0x0, r14)
r15 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r15, 0x0, r15)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r13, 0xae80, 0x0)

10:07:12 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x8004, 0xfffffffffffffffe, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000200)=0x10)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getcwd(&(0x7f00000002c0)=""/4096, 0x1000)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x2000, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:12 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746c333402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:12 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:v4l_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}]}, 0x50}}, 0x10)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x35b37000)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x42c000, 0x0)
r4 = gettid()
rt_sigqueueinfo(r4, 0x1c, &(0x7f0000000200)={0x0, 0x0, 0x10001})
pipe(&(0x7f0000000680)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f0000000380))
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = dup(r7)
setsockopt$packet_int(r8, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d)
r9 = getpgrp(0x0)
capget(&(0x7f0000000000)={0x0, r9}, 0x0)
r10 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = socket$kcm(0x11, 0xa, 0x300)
ioctl$sock_kcm_SIOCKCMUNATTACH(r11, 0x5452, &(0x7f0000000040))
fcntl$getownex(r11, 0x10, &(0x7f0000000580)={0x0, <r12=>0x0})
r13 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
write$binfmt_misc(r14, &(0x7f0000000140)=ANY=[], 0xfef0)
fsetxattr$system_posix_acl(r13, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000100eb8000000000020001", @ANYRES32, @ANYRES32, @ANYBLOB="b8e365400357609aeb2c35eb6346b93ee6a8ccac064b28045fb5ccc42eb61c604bd9bc6f06af127321df7559522954af9fbdf181f025e9a65d7a17310597d62a318833df89a57e5b53778aa3e66844fc416fc7e2cee11b08996b374e80f611201000be976c77795ceead35bdcf1b23c88334501831ff741891ff83bd8103282caf9b66fa23cc7ad8ce987b956942c2650306152e474b", @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX=r6, @ANYRESDEC=r14], 0x8, 0x1)
r15 = socket(0xa, 0x3, 0x8)
r16 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r15, 0x89a2, &(0x7f0000000180)={'\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r17=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r18 = gettid()
waitid(0x83b895581628fca4, r18, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r15, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r17, @ANYRESDEC=r18]], 0xfffffffffffffe56}}, 0x20004850)
r19 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r20 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27)
r21 = dup2(r20, r19)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r21, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'})
r22 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r22)
r23 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40)
writev(r23, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r23, 0x227d, &(0x7f0000000780))
kcmp(r22, r18, 0x0, 0xffffffffffffffff, r23)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r24=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r18, r21, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r24}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r24}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r24}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r24}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r24}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={<r25=>r12, r13, 0x0, 0x1, &(0x7f0000000080)='\x00', r24}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r10, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r24}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r24}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r24}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r24}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={r24}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r25, r8, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00', r24}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r6, r5, 0x0, 0x14, &(0x7f0000000180)='&$vboxnet1security!\x00', r24}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', r24}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={r24}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r24}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r24}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r4, 0xffffffffffffffff, 0x0, 0x84, &(0x7f00000001c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7', r24}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r24}, 0xc)
r26 = socket$inet6_tcp(0xa, 0x1, 0x0)
r27 = fcntl$dupfd(r26, 0x0, r26)
ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200)
r28 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x20a400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r28, 0xc0502100, &(0x7f00000002c0)={0x0, <r29=>0x0})
ptrace(0x8, r29)

10:07:12 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000000)=""/36)
ioctl$TCSETXF(r0, 0x5434, &(0x7f0000000000)={0x200, 0x4, [0x6, 0x2a1, 0x3f, 0x4, 0x7fff], 0x7})
r1 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=[@acquire], 0xffffffffffffffc3, 0x0, 0x0})
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000040)={@remote, @multicast1}, &(0x7f0000000080)=0x8)

[ 1737.417262][T25385] binder: 25369:25385 ioctl c0306201 20000200 returned -14
[ 1737.498307][T25393] binder: 25387:25393 ioctl c0306201 20000200 returned -14
10:07:12 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x43}, 0x18)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r6, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x6, 0x0, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x6)

10:07:12 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000180)={@empty, @local, 0x1, 0x4, [@rand_addr=0x3, @multicast2, @broadcast, @local]}, 0x20)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000140)={'macvlan0\x00', @remote})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1737.766401][T25524] binder: 25512:25524 unknown command 0
[ 1737.772791][T25524] binder: 25512:25524 ioctl c0306201 20000200 returned -22
10:07:12 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x400000, 0x0)
bind$l2tp6(r3, &(0x7f0000000240)={0xa, 0x0, 0x7, @rand_addr="26b9ca60b438e607488905a1a546de68", 0x1, 0x3}, 0x20)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000180)={0x2, r4})
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$TCGETS(r6, 0x5401, &(0x7f0000000140))
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r7, 0x0, r7)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x40)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$VIDIOC_QUERYBUF(r9, 0xc0585609, &(0x7f0000000300)={0x6, 0xb, 0x4, 0x0, 0x1, {0x77359400}, {0x4, 0x0, 0x0, 0x10, 0x80, 0x80, "62f0c983"}, 0x10001, 0x3, @offset=0x5, 0xf0c0, 0x0, <r10=>r1})
inotify_add_watch(r10, &(0x7f0000000380)='./bus\x00', 0x100)

10:07:12 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/btrfs-control\x00', 0x26b4061ed54bbc9a, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x1fd, 0x0, 0x0, 0x1000, &(0x7f000005f000/0x1000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x80, 0x0)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r7 = socket(0x11, 0x3, 0x1)
ioctl$sock_ifreq(r7, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
dup3(r6, r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$KVM_GET_VCPU_EVENTS(r9, 0x8040ae9f, &(0x7f0000000140))
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r10 = socket(0x10, 0x3, 0x0)
r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
ioctl$SNDRV_PCM_IOCTL_RESET(r11, 0x4141, 0x0)
ioctl$sock_ifreq(r10, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
setsockopt$inet6_IPV6_ADDRFORM(r10, 0x29, 0x1, &(0x7f0000000180), 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r12, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
fcntl$dupfd(r12, 0x406, r3)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
r14 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x101042, 0x0)
symlinkat(&(0x7f0000000200)='./bus\x00', r14, &(0x7f00000002c0)='./bus\x00')
r15 = fcntl$dupfd(r13, 0x0, r13)
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:13 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0x4000, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000004c0)={0x4, {{0xa, 0x4e23, 0x80000000, @local, 0xffffff81}}}, 0x88)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KVM_GET_TSC_KHZ(r6, 0xaea3)
r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dlm-monitor\x00', 0x8080, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100002}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="44000000020904002abd7000fedbdf250200000508000300000062a3080005000000000b080003000000000908000300000000040800050000000013080005000000000e32f5768659699f1ae33948c6ddcfbc894df71653ec36360153bb35f417d22e813ca3cf6c43585d111bb16bc965b0315b187632811ce92f88cf3f34ffe71c30bb3427ac4b0cdf73ea920a027a80a3b541f4418dcd9bac13874805844836307cacb620808a2540"], 0x44}, 0x1, 0x0, 0x0, 0x8001010}, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r9, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1738.092494][    C1] net_ratelimit: 2 callbacks suppressed
[ 1738.092523][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1738.092540][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1738.092922][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1738.098799][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1738.104900][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1738.110854][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1738.116520][    C0] protocol 88fb is buggy, dev hsr_slave_1
10:07:13 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$NBD_DISCONNECT(r2, 0xab08)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f6304fb8cb6ae8c"], 0xffffffffffffffc3, 0x0, 0x0})

[ 1738.122661][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1738.128451][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1738.134560][    C1] protocol 88fb is buggy, dev hsr_slave_0
10:07:13 executing program 1:
r0 = socket(0x10, 0x5, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2000, 0x0)
ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000100))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r2)
signalfd(r1, &(0x7f0000000140)={0x301}, 0x8)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000000)={0x80000000, 0x0, 0x1001, 0x7ff, 0x0, 0x10000, 0x7, 0x3})

[ 1738.269305][T25596] binder: 25593:25596 ioctl c0306201 20000200 returned -14
10:07:13 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r5, 0x619, 0x70bd27, 0x25dfdbff, {{}, {}, {0x1c, 0x18, {0x0, @bearer=@l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0xc0)
r6 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1738.314697][T25606] binder: 25605:25606 ioctl c0306201 20000200 returned -14
10:07:13 executing program 0:
r0 = creat(&(0x7f00000001c0)='./file0/file0\x00', 0x1d0)
socketpair(0x8000000000001e, 0x805, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, <r2=>0x0}, &(0x7f0000000100)=0xc)
keyctl$get_persistent(0xe, r2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000080)=0xc)
write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90, 0x0, 0x5, {0x5, 0x3, 0x3, 0x4, 0x6894, 0x34cf, {0x5, 0x1, 0x8, 0x7, 0xdc, 0x8, 0xb603, 0x5, 0x6, 0x6, 0x3, r2, r4, 0xfffffffc, 0x7fffffff}}}, 0x90)
r5 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=[@acquire], 0xffffffffffffffc3, 0x0, 0x0})

10:07:13 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000480)="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")
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:13 executing program 1:
socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000080)={0xd860ef4aff146ac, 0x4000, 0x40, 0x9, 0x8})
sendto$isdn(r0, &(0x7f0000000140)={0x7, 0x1ff, "1711d44a0955f93cc3ba400917210699fefd23bb930ce5feeb73e119068164cf69dea043165526390e617734b24820feb08131c1c87d1a4064ccbb8dac381e98f95e75fb1fe504b2fb02c5c26a32790747f95edc5691720e752f7681a89d4ff7f4e7f2865cb6b2ebf478c389f327949fe7c3d0b60f2b17e02dfc58c4e57d12f4319012c741cb783491ea0205bec7e12917c815ef3e100ced5c17f0815a0d2b2d6f32b6da91f83b458f86c79fe3dd94f3093c6dee77bbee04e02349c053"}, 0xc5, 0x4, &(0x7f0000000240)={0x22, 0xfa, 0x3f, 0x9, 0x20}, 0x6)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x80000, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)={0xfffffffffffffe03})
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r3 = syz_open_dev$dri(0x0, 0xffff, 0x2000)
ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, 0x0)
dup2(r2, r3)
ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e)

10:07:13 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000000)=""/36)
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000380)=0x6178)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
clock_gettime(0x0, &(0x7f0000000140)={<r5=>0x0, <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r7, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000200)={0x9, 0xb, 0x4, 0x200000, 0x4, {r5, r6/1000+10000}, {0x0, 0x0, 0x5, 0x60, 0xae, 0x7f, "32ef6e22"}, 0xc5, 0x4, @offset=0xfff, 0x9, 0x0, <r8=>r7})
ioctl$DRM_IOCTL_GET_CAP(r8, 0xc010640c, &(0x7f0000000180)={0x80000001, 0x8})
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = fcntl$dupfd(r9, 0x0, r9)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x5, 0x99, 0xfffffffffffffffd, 0x10001, 0x0, 0x200, 0x5, 0x6, 0x8, 0x8, 0x3, 0x80, 0x2e5a, 0x80, 0x413, 0x80], 0x100000, 0x1d4000})
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1738.687718][T25677] binder: 25672:25677 ioctl c0306201 20000200 returned -14
[ 1738.726927][T25683] binder: 25678:25683 ioctl c0306201 20000200 returned -14
10:07:13 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d7a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:14 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x20180)
ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000002c0))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
vmsplice(r2, &(0x7f0000001780)=[{&(0x7f0000000440)="52734c547f17a4b312275fabd1a16ae59495ae230bffa413976cb73e5dbe1a4bb2559bc6f69a776c1104157d73a79c7f3958075cee8be533216796f7f1f2c5cc4d818607942d5174165c0b05162741cfc3718c72e4788b601d762bd6841d0de377d3df93c8c72ebccc384f82a652f1208abc2b952f73688652b4d57ce674de557f1b125d87a8362f5ca13758fa05ea3e331d25e7378118e9280048524551312d71477c64e7a0870866eb27af9870c08455b4565e6c8169581c025be925396d2469bcbacbe993fe20fc95af5350391ee0c0584bbf9f3c9320570ed1a401076c6cf3f96cf4e21c775188149593380c34943d13cba12ded1a4cea665083b56b4b4a55da017353337e0960fed47c8bb4a82a4754fb22b1e1bc6837d5644627fe79be57b7d62d7770c9d6b7177adb794c0ec227298d12347e31abaf58ff689ecea3053affced8837cd82a0b609e3ba9a60a1d2a86a2dbe3a98bd0ddf98cff6466148ff67d3bed261d5f92a9a67ccc7bcafc75ce6ddd6cc6d93d4f4558bc92d2ed902f455bbafedfb8387fed7da28caa2e702082b329d5b534238cc1faac38f0fbd636215fd2babcbab300635454227aa08d241c1b2a4b08cc425191629f6e76a33ec3eab4f3b42792afeded8995fd8f1928321eb28d30226ee123005f2b1f8156824fa96d2087eb73f9552147cfe35b21be365a9c0c6ed42e370c02c927170c6b6f255ec106b2f707e8830fe5281683322c51ec9604c692bf9bf72357a47c7c51e2d8346873d6c9ed99fca7d98bb73639f92fe4e53f3d2af6d128fbaaf3e81d5076afa4280a145319edaf59f3f9c0f98ef12da7f2b10cf9959f96f3dd8237e53f845c9076da21f3885c9df73da45da0ce4ca925a4a046edca30f7fe60e5d98b9616afca6933d4063d454e535ad530396f6dca874db8a98ac5ec59e78474937e6ffbbda109babe0306a83ae8cdffc25f32cb9aa7aed2b733481ad0768e2ad840878305f8fbaff31336890f89e1e446c168c3c87f164a22278f1902a2c2067b716d6ea84e311015d9589e3ec438b825256c94b66ccf555709035c2256699a14348d4f2f7ed701f30f5c369ef82978c087ccefc5d9b51f7234616005856bcf4e50f156960ea662ee5990df988cd2aaf5b69b32a331802712135d0df10a797d8cbea3a5ed2851da215aa148593c913e2cf551e4b3c36fc938026d66d715a976ae2c44d84708a9660440779fff95c75a0eeb8d6accb18c988c03aff094735c83cb5c1a8da460fbd217b7b6a0e80e793c5e2699593dd8577b685238e9f4a752c274ffdd75a7ca56253b2562eff8ba86bf1d3a898d264443e49e678fd7863375cd632974c1c117e29bf8d493dac377f25ba6a33cfc5173d56775cc5085ce674673b733529709243a142adb5f0f067f454fb0aae28ef05b7807c549fde45f387170a821fba2b6163f8a1111bd03c076aa8b14b5c2b26b4aa82209c051aec8009798ef63c690da79cc694605e34f4d8f1a685e67792475499cd7845c3bb4e0f8b8f22b4c38ebdc11510813860cb22f38d95cd9ae7cda008934bfaf5091ad4a2263a84b9764764374c922c13febf075bd3ebffae05896c5de0d6ff8c3dc6fc3573944d75fce669e34246362799dab976eff13ba0555497189a039fc0e88df9c93026159ae9c49fe66e36cce8240e842e8a013bc02f00b1d997b631ed1c4f9e3d63dbda55dbfe61e9c1f64d826c42dcfc3d8d26e32761ee666b72989c3058ad9245ccce63db9ecc7baa6aa6eb3129ed9293d77ad26a01c1f56dce39eefc8b8f68bf4d9ce1fa5a02ff915360accf138cd2d3734d0dbec954964e8f7be592c8e7a4ea183cb9c39c7aa66fa9c353f496037a9e4de5a57278f10f0c4ef90d51ee6f1109596daccd62172a659b1b0ddfb797818b0dd1798e1ef57ac66a91117e32f0898d3ed9166fdab58d78b28ce0b872fa5749b23301787294ff8933b57229ff076e18c8c0fec37eea56b40fbc889a375fb95012efa739271971f5c3776bf878eb511eb8cd25eaa4272c363c2939d57e21b2ed22f56ab93500c6e2f1c6e3ce818feeb5e4e3f01db3713c6007fa39671c48eaa304ba832c78b97aa35ab68871659a02b47a32e88bf1a7fe239cfe03f64ed995360bbf28097f7c41f360ffca79d07452cecb1768a9b48e6767b180901dfc0727c4a121357accbe473deb39e99a4786b42fa9b5e459daead2b00e0cc5134f0056daa482608988a3a80ce6f6886c518c87e1d9b11acef30b34a04eecaf0e52466375f4540bc5ac77cebad1efbadc25bb1ea8959fe133a9705973677bbcf1ba3a6b324e8a3531968f600f994e820b94f2f3d0c8a86f7a861a31c61d9413b72ed80914aebf48910ac374143c558043d846db3872d7a335e6e82e9276fbd8372b6c78e6dc53b4e38abcca6821212244ba1057fd61dc6ba21d7c5d590f05b592c5ed53dab592f9797a0152035f8438005341bc7ee07ab779966bfbc0e98250532aec7a03f02a884d231a41f1b35de681e01809cb4b96a8fc9955da88b04913d90dfefe63fa9b46795b8e261d99ae9cdfbc296af39f070d23dcb6804d8b7d963c6733b431568cdd4638314645489a4d1db0e1462399186e0f46045e12a3d237b249f4205f5cac1b2c80f86902ea3de93a8dbaf5b102d65e55c8ac19222b8ebece68f88e91e5934eba984fced8ef4d1e85d95f14736ef84dc1ac3cff09d2fd43280f1f9131b66e2ad86b852670bf2af5f2164fd162724b7caaa835390f3f4a2537db69d1e919fc55b22b61ae8923886a0b27b4f9a7cff2c38fa908257cf511e9953f116a0a207354ee471d05911e713fb4aa33f62c9bb4566863d0c561cfe81e7f501c91df6e97b3de830851cf38457ad93e8bfb32c116053c744f408e2aed3354b3a2f52cb0a64fde0d5038dc4fa407a558fcb4d347eaa8f9ea97ee2e17d315b92896dc7fbe222385ed5759eb0403ef0bc679e82e743f08defe3664e3435c908be7561741d2c111dd7b97f7bf027e4c0826acb2eb66b555dfbaf8502a937a4bd531b58fa6e238412b141fda046c1518f6451d282847c9ed19956b0fcce5a4506d863039c905df81d6755449d6005b59a4a496f16af2d13d1de39035755d6e29584879b5c5c67e01292276f01afeea265ae2fa0267790b200f3274d51604e08a143592e7382205245a1f0917cecb771d8e9832f232b29feddaf878d3233522285e8cb348a4ebe445613be7e4f1b7402bf6c62b5514a701cd9ab6b1aac8bb008ca645b772d78676099fe93eb771af5d31fd650b9056f92c586d5a5ab947e20536dd82bcc77a76416422fb4cab4da25fd368fae515ccfa659bc9f1e918436d546719f8407de8490c7c2be93038283129ee7093f11162e87bcdab235610b80826575a071500ad86ad2eb15dd105f9c93049f80eacb92eadef6c2dd1a45d55720251802a095e7eb52510255aebb0585722b2114edc53d2d163dec7dac366fdb8381da398d4e65e170e0dce064ca31fa33698b7134e3ab8ac14d3d9c53ba91b99bdb88f43619bf80ac7b5c84ef15dc453236653735a0656307fc6d0971e12eabc0e9f2cae3964b8a0dd7849501ee9924e3b244e9e6e15cae0589efda674e7243bec78075098147f110cc3e8fc653ade51251ba45b3f5f42ca5a05b2a80ebbac8398f2711edf15c0da4e0a9f8a5febc7c911b9e11188e9632ecca9d7f3b0ae6b25c0cf23859cb48454ae342ed253a84088e83d9595e3734f0e5e38e07b39be5315747e9223891dd2193859cb0b6c22605c1fcba046bbf858982fa719494bff2dccdee9729eeb2c6740d17559753b8f5169511e17fa1237d2adcdf40e5bcfcef3a4f7aea967662e3693f3315a5fd282697c043034504bc05d136cedb8b666673689ff1bda6c92f51ce0fd4fe7e99f300520b2a40dac7b99d3b1f7e15b234ebe4368b380ec93ad230c25b2463c24d0f4134615b343b39f945789ddfb5bd9858446f067837cc84433dc38f181b164968fe60e52376b01630f9d7a411bf66dd17b4fbedb49513742778147eea424bbbfdd7713a1278aa40101d850b82903186d7310f9e16046945a2dc547743de5bfe8b255bb51c7855eeaa16b961238fad07d1c6351059e734d08caf9b517ee122f22ab6da04771e3adb3e016fe7195a425b4b4147592fd5e6d1e366e9a0c429255e489a17d9047d457b4a816dcecab67328d7efca5c06b0658680a70df29f9ed4e83e8002d8378429a88d906a2619e64a0709a9a9fc35e374960f9470a421e3b89cc503066d3f72a8725c1a2fc5d1b219c36f4a2177232de06faea4f08d21d4c36e39715662ad4dfc8f7700470048a210f8bceac4b53c94c18a9edab65979c01a88c95377d892e96caf2fcdff10ccb46ed0da22993c6d17acc9d5b0a5520095ae7cb95de63153ebcbb4d98b7f11ecf3b32deaa8985b2cdc5b418c9a2b5d9018921f1ffc15c2e300ea4ba151e2de661d45a970cfe323369182d6359c2785a0b35501b4b7d886cb9e9b2ac5b8553caca8620dacf3f0692b880b2b374ba6509012004117c7d262f840ed74671552b43d43652f45fbf723cc3dd611c38fcb5010b7dbadade07d4d36600f9dba708df081a6526fcd6fd849c259bcbb85ae24f0c3ca9d0d2e0e6aa6b73a4f331b99166a15b578788ea2d1f40469605a39d128461a6905d1b886df3259a3cf03edd981cfcd0690c05e74c0d14d43c45e72e13f7a15eea0391f54aa07b981997d8f6f118434042781fb32f2699539b29b00fedcd40f4a4e61d12d2ec47c47df666611cf2467b3ca9a60f0e91f401d269de59ce7a474ae41c36e1f0af3906816558605370a134eb1eb638e038df9af842d8865e0faf97c66aea8d1b40699e6a8b2cf0c40384506906db5b0a58c1cdf13c2a3d9373f7ef8645fe51e2e02e2d5c91c48bd5729e1c298d7732766e96762869051bc8d95939842f155a0b1139c222b81277cf1efe0bebead73e2f1d6356b319b4c56c10bd2a4987d26a8735068fc34fbbdf5953e4a0525e84e75689a7b9d0b329a0539da933b14c112a57cd57249e4aadba69ff2fd8d92ddc083e3e6e3bf294fabfacb206ea1efce41604cf75577ec51efdd07596160f5a9e3c850e0eb2e18a911ff133268eda0ed84019f32db3eab0eb530c4ae86280ebeacf2a551f15db78d0b579ef1f82b21040bb653966c3dac9e9d2c9d2f4785a6fead32d5468851f2b5303d5eb1cb2dd67b3fdb679576655eb4fb8875acae684d41d1420e221e46af7e63755f40cef3824aca9ce1f978e794ec4e23ea233332254e087d7a5bdf3d1655b6731ae74173e1b8d388e949e952ad27e1339af3b3d942b2c039c3e7a51ef8601d4f0291a336bf73654c69bd75d096f654a2926db435b1457116119fd874276c47644526504a473daf21d860da69117248edba761ef96b59bd09c94813495ba73aa7f7b0a9d83b3fbe3ed11946f25ce4bf38eb4dc6c011bc3e19a90e50123371ff13cdcb23fe6e24b84d6e071a3a623442286929e8e0652f8f55f6a39b3b98e5dfdd76de188cfac7448c24fff4c061a5668c266cf789eb7f78cb88a0da319b1f80dca7b21ee7bfc552583a8ec822cf822441c292b5f2aed1ad3244fdce29015eb3d85c85f7fdca1e6fff068b6afdac16903399c7f4988ee33ab3bb22169f84798935c85fd174f5936e13710ac3f5939d5bee7e2d35f25f4547d615e3f86e80368dc22e94701987ea8475405cce4dd0c86d5e87479834a374230ad9859c889339cf8ce11165189497649f19f375a29070299e8d27e8e922ba64", 0x1000}, {&(0x7f0000000180)="c260f9622fd5834d0e61eac0fa6e1c666b3eca83242b97d76e6785af22af150685778ea93b8144bdf15f3e3764b269120a850df166955118d048e6bd9920e8", 0x3f}, {&(0x7f0000000200)="6cfc397c03fd64fda277d40b2b68ed7fe6738b7fcf746caa69bb4a277207bf1e0f0c9f32ac95", 0x26}, {&(0x7f0000001440)="2cdfc5c3de18c6828afc873508131391a28ea33825bce1cce18138742b8056e032d34c64203b7a37b68f7787e2ae06bb76111450f8e8228bb86d2f2492f2159c99998d4a2860c33e21a626650fe47873a2c5435af95cb6aa", 0x58}, {&(0x7f00000014c0)="a04a5a0b6e9e21ae6c8b4857237bbe036eddfdbd5a582d92985fa37dcc333dcc9f553b1a7e6d110504526d3175e15cbab015438a679d15defaf8318bf847e44386cf9acaa1f6424e5ff4916f88db96c9c936265114abf9bd56c284639fe8d226bc3a0d2ddbebfb8c6c8ad61c6ee34bceeff8f3a3a5af4e7651428632f15555acbba163178596de7180c253b699b5e9f4f222f7cf565f819e543eb14827201b822f794ca8ea27fa1c41b9fa1c03cf458b8073561fa3964689d3", 0xb9}, {&(0x7f0000001580)="38829eca525807823849f0fdaa535f1e150e09eb625c0ce5856f88c9f0ff5bd35f179405569f6ea8cd0002361445b949c7f244949b1c1bde951565222e2459fbe3befe4ed983f7a43ec5fa", 0x4b}, {&(0x7f0000000240)="1c2c39cf049e4c563d09dd1bd066ac3bb44ab6d6531b8866dac7dbc957331d025d4f", 0x22}, {&(0x7f0000001600)="d79393eec9fdb821cc281af1f1aafe172419828a381ed5b086e8beedc42953366371bbc1fa0fe8cd5831586212a5159dc45e394fae3b98203a1a250f552c0c475a6e546eb0a2fef5d512091369553d6f2ddf5411873a094e676ac6e416a31bf3e3d3a38a85d2", 0x66}, {&(0x7f0000001680)="b142224d19c88b6c420183e19050ce9d04bf7d7ccb4c4bb25a9ee1d2570dd70f22c73189c63f518a4971d394570849af9bde99fe3d9f17efe223a1ee3fd169d8e75079cc1b4e8b0ce9c759ae5c5a7bb432dd7f4147eb97647ac34ad8641828753ed464c9566724f129a903730b74da280046ebdb86df463457ed978846cc6933258e03e80dbb0878c9ccac1d3cb1683586e8b5ec01454edbfe366c953deddea82c0625e807018b8b6a86a88b6297466bf488de301351257d34fefafddae4190a8045759787040cd6aeccc73099319739e47aaf868d64180ca15bf6aa07692bb899bda2dc896ad9e6af", 0xe9}], 0x9, 0xa)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$UI_SET_SWBIT(r7, 0x4004556d, 0x4)

10:07:14 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab31, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000140)=0x10001, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

10:07:14 executing program 1:
r0 = socket(0x0, 0x2, 0x30)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a60000009ce80000e0ff000000", @ANYRES32=r4], 0x2}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000080)=<r6=>0x0, &(0x7f00000000c0)=0x4)
accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x81800)
sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r2, 0x26, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x3}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x65, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8)

[ 1739.152744][T25822] binder: 25821:25822 ioctl c0306201 20000200 returned -14
10:07:14 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x6c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563044000000000056304400300000000634040000000000000000000000000000000000000000009000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="8561646600000000030000000000000001000000000000003300000000000000852a68730010000003000000000000000000000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000203cb5aaf42ce6ce16e87d0400000000"], @ANYBLOB="0e630c400200000000000000000000000563044002000000"], 0x0, 0x0, 0x0})

10:07:14 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={<r7=>0x0, 0x1}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000500)={r7, 0xad7}, 0x8)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000480)='./file0\x00', 0xfffffffffffffffc)

10:07:14 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r2, 0x0, r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x40, r6, 0x376afc4d28abb293, 0x0, 0x0, {{}, {}, {0x24, 0x17, {0x40000000, 0x0, @l2={'eth', 0x3a, '\x00'}}}}}, 0x40}}, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r6, 0x458, 0x70bd2d, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xc1)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
write$FUSE_DIRENT(r8, &(0x7f00000002c0)={0x30, 0x0, 0x8, [{0x2, 0xa26, 0x5, 0x3, 'syz1\x00'}]}, 0x30)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

10:07:14 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0xa2, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r7 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0x6800)
fcntl$dupfd(r8, 0x0, r8)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r9, 0x0, r9)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1739.560987][T25851] binder: 25850:25851 ioctl c0306201 20000200 returned -14
10:07:14 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f8ddad3900008327"], 0xffffffffffffffc3, 0x0, 0x0})

[ 1739.683451][T25856] tipc: Enabling of bearer <eth:> rejected, illegal name
10:07:14 executing program 1:
r0 = socket(0x23, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})

10:07:14 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20\x00', 0x80000, 0x0)
write$FUSE_BMAP(r2, &(0x7f00000004c0)={0x18, 0x9, 0x7, {0x354f6062}}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r6, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463042a94000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452170caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1739.835539][T25863] binder: 25861:25863 ioctl c0306201 20000200 returned -14
10:07:14 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
getsockopt$netlink(r4, 0x10e, 0x1, &(0x7f0000000200)=""/24, &(0x7f0000000240)=0x18)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket$pppoe(0x18, 0x1, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[r3, r2, r7, r1]}, 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:15 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x708100, 0x0)
recvfrom$inet6(r3, &(0x7f00000002c0)=""/184, 0xb8, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x79a}, 0x1c)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r5 = fcntl$getown(r4, 0x9)
migrate_pages(r5, 0x9, &(0x7f0000000200)=0x6, &(0x7f0000000240)=0x10001)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:15 executing program 0:
syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)

[ 1740.070820][T25895] binder: 25885:25895 ioctl c0306201 20000200 returned -14
10:07:15 executing program 1:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@initdev, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x8938, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10rist\xe3cusgrVid:De', 0x0)
ioctl$sock_ifreq(r1, 0x8919, &(0x7f0000000000)={'nr0\x00', @ifru_flags=0xe067ca653ed292d5})

10:07:15 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
getsockname$netlink(r6, &(0x7f0000000480), &(0x7f00000004c0)=0xc)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:15 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
r3 = add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r4 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r7, 0x0, r7)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000200)={0x3, 0x0, [0x7fffffff, 0x0, 0x6, 0x5, 0x1, 0x7f, 0x33e1c75b, 0xf8f6]})
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x6)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
keyctl$describe(0x6, r3, &(0x7f00000002c0)=""/4096, 0x1000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)={{0x77359400}, {0x0, 0x7530}}, 0x0)

10:07:15 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r5, 0x0, 0x1c3, 0x2400c010, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10)
connect(r5, &(0x7f0000000180)=@nl=@unspec, 0x80)
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00')
r7 = dup(r5)
sendfile(r7, r6, 0x0, 0x523)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r8, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10)
connect(r8, &(0x7f0000000180)=@nl=@unspec, 0x80)
r9 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00')
r10 = dup(r8)
sendfile(r10, r9, 0x0, 0x523)
r11 = fcntl$dupfd(r6, 0x5f70364422de88c3, r10)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_SET(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x0, 0xdd42ddecb798d42f}, 0x14}}, 0x0)
r13 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r14 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, 0x0, 0x0)
connect$inet6(r14, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r15 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
sendfile(r14, r15, &(0x7f0000000240)=0x202, 0x4000000000dc)
r16 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r15, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r16, @ANYBLOB="050c27bd7000ffdbdf2503000000e7401191a1d7da378753f18bb8db"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r13, &(0x7f00000001c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="000829bd7000fddbdf25030000000c00050020000000000000000c00030007000000000000000c00040008000000000000000c00080001000000000000000c0008006c000000000000000c000200f52c2f74000000000c00060000a666414e000000000000050100000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x20004811)
r17 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0x481a00, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r16, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fffffff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa0c}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r17}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x45486d686cf8811c}, 0x44002)
sendmsg$NBD_CMD_CONNECT(r11, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40040}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800007509b0f2dc46b216f4360100000000cb4e376f6edf00c206780000000000", @ANYRES16=r16, @ANYBLOB="00082dbd7000ffdbdf25010000000c00060000000000000000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x7577a56c2c18edf)
r18 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r18, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r19 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r19, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x78, r16, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r18}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r19}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x3af44cdd30b76c10)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r20 = socket$inet6_tcp(0xa, 0x1, 0x0)
r21 = fcntl$dupfd(r20, 0x0, r20)
ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:15 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d963044020000000"], 0xffffffffffffffc3, 0x0, 0x0})

10:07:15 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000080)={'bridge_slave_1\x00', @ifru_data=0x0})
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x480c40, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000000)=""/36)
ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000001200))
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000001100)={0xf000000, 0x1, 0x10001, <r4=>r0, 0x0, &(0x7f00000010c0)={0x9a0920, 0x0, [], @p_u16=&(0x7f0000000040)=0x6}})
ioctl$SNDRV_PCM_IOCTL_DROP(r4, 0x4143, 0x0)
ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f00000000c0)="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")
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
chroot(&(0x7f0000001240)='./file0\x00')
r6 = semget$private(0x0, 0x4, 0x2)
semctl$SEM_STAT_ANY(r6, 0x6, 0x14, &(0x7f0000001180)=""/81)
ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000001140)={{0x81, 0x2, 0x8, 0x3}, 0x2})

[ 1740.646787][T25995] binder: 25993:25995 ioctl c0306201 20000200 returned -14
[ 1740.748367][T26020] binder: 26011:26020 ioctl c0306201 20000200 returned -14
10:07:15 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x12, 0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:16 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r6, r2, &(0x7f000003a000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000140)="f028b7000000000fc758010fc72fc4e1fee6243d05000000f30f2ae166baf80cb8f01ecd8bef66bafc0cb801c40000efb9aa080000b8994f0000ba000000000f300fc7b700a000000f07440f20c03503000000440f22c0", 0x57}], 0x1, 0x0, &(0x7f0000000240), 0x0)
r7 = fcntl$dupfd(r4, 0x0, r4)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r8, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r9, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = fcntl$dupfd(r10, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r11, 0xc008240a, &(0x7f0000000240)={0x3, 0x0, [0x0, 0x0, 0x0]})
getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, &(0x7f0000000400)=<r12=>0x0, &(0x7f0000000440)=0x4)
ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8936, &(0x7f0000000480)={@mcast2, 0x4b, r12})
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:16 executing program 0:
keyctl$session_to_parent(0x12)
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=[@acquire], 0xffffffffffffffc3, 0x0, 0x0})

[ 1741.097961][T26099] binder: 26085:26099 unknown command 1717991472
[ 1741.105597][T26099] binder: 26085:26099 ioctl c0306201 20000200 returned -22
10:07:16 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000200)=<r7=>0x0)
sendmsg$nl_netfilter(r3, &(0x7f0000004980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x46a8, 0x0, 0x6, 0x20, 0x70bd25, 0x25dfdbfb, {0x5, 0x0, 0x3}, [@generic="436bd9d8cb10bd2e09ecb85a47e13be1fcdb61322c551892028ebe6e52e768788db10c28c9b5862326f8388a787e623e33ebf26e8df51adf7f3e6a230e8f9934c211e55273a3d221aade4f94bde945af1655a315d69d88e105dd56260867f14c073c496326eb45a2d8efc3f716a0bda38aabf88d0b5b480c1729116297c18b42c369913c2cc64d53ec2d597224eb7e20273d926cee68b47f98020554b93ce652e702d4b046ed518dc252c9ff8b109a5e041037dc7e6f8d5d95d3a269972eabff3c2832a4f736c40a4c9374672f66664ee3809fcd0a917d820e2f2e3fa0f6f6d80fa5cbb4bd348842", @generic, @nested={0x1109, 0x22, 0x0, 0x1, [@typed={0x8, 0x96, 0x0, 0x0, @fd=r4}, @generic="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", @generic="6af197150c237f07ac6389f0c845e5671073525595ec1683ad8411cab4ef478dc72f9f8b103b7c0742b0d24d5d637f3f3d9325a2329d6d", @typed={0x8, 0x1c, 0x0, 0x0, @fd=r5}, @generic="71ffeccc37c14a643c2ce18341c7303f6def5e3c8a10401b0489af274f150fa3f7323845b5965959ac38ddf5290fc8ad68c94677842e811bb3920f0d6f166f459b05a6f61aa2be9342225373b3ecc48ba9480299967b8e6f47fb55c5403c4a3d8947", @generic="ed8642c759edfc5edbd7ff5b68cc972651dc29fb4db8eef9b6807c1cc77100e75dda4c3db6f76bcda2affdd6af183d5f3efa857bbfdf5c12995a248e2b05c497d36deb3d438e740a73b80da1dc999021e444b16d", @typed={0x5, 0x14, 0x0, 0x0, @str='\x00'}]}, @nested={0x1277, 0x1e, 0x0, 0x1, [@typed={0x8, 0x48, 0x0, 0x0, @u32=0xaf}, @generic="2fee62de0e50aa4fbe541b59cc05a686adc0769fb35c3ea73f2cb74774c2662da6a10e607e65e37035f2c0a564f0d517ce1dca534226f48af8c03e2d6e98dd1840f5e471df7a8ac2e068ee1ce5e06f975f6ea2a28fb3c6acecc3ab3b58fe206b801d73bec505fb08984d4c5bbad1b7a992c864bb0de3ae9e4b6e27825fbe945b3336852f5d7cfcefd109fcf4e9acfec4306293d700bed5a5cfccb1c92c794fc1e818168f704d3e8880c9006e6dbbb0782c9e1ea601865005e8fdf037b0ed705f557f44e60df7cc2d7f3581af75988a023691", @generic="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", @generic="f044889efa5f55b4ba204f8072bf5a36e7e8225fbefdb15eb883dd2656c23b1154ea341c2ba1e4d5bf5a293b296360a0585da772fd4bb309f73ec784fc964b7cce0fb5f700ee41a98e91adfd957ff6d13f5b8a1c483af739d94c8e997612afde93bb27b26df027adef453c8efe45eec266c55e0727245e6073b41cc287f6a4ebebdb574cbdd5f4c7763d874adfab0de253a40e25b7a2216b7c61d7a5bc57dbc3c5be2bebb817419cdc74a82346dd580d411a7ecbfc8f411bfb0b752ee2d0fe2e4f957fea5c0df62227f6ff", @generic="74e48a8ef0035c8aa39c995c1be4b294cb7cef1bbea3a380b598f9186f5000e7638cae5819bba9a205ad0d03f79c2e3bb2b16aabe569f0a2a49e828e2eb293ebe3a015a2726e662375cdfe9eeb1ed0e355c9d7a5f342de649b85ee6cdb6737", @typed={0x8, 0x62, 0x0, 0x0, @u32=0x6}, @generic="dde46f39504398fd42a4338efbeba233c30a00202eb7fb5597bf4f34f1e3d43323d4d8ad86445f40baafb37696b6a2b4f404fc149cf0dbd0f5715443e71d964901c378899e060c05beffda3852c95e6615c9b4728285818a492cf9f4c77e3293e13c6ecd61efe3"]}, @typed={0x8, 0x67, 0x0, 0x0, @u32=0x9}, @nested={0x216a, 0x27, 0x0, 0x1, [@typed={0x8, 0x77, 0x0, 0x0, @pid=r7}, @generic="a401982e1cff797f94c36c06a6d6216f40605de05eafb7085e5e45ed6c8214964832ad4bb706c0fe600675852e70e1189d6b2ca5152e949c11dba58252c26fb3e6d7adba5643a89089c7e3409a6bf1ad18fce54db48db082a9a23ac7", @generic="6daf65cfbdcaf1c525db91a64e5d455b43d911214537a2f2675bba16f063c605c52814fc773743e4fcfe48bfb4c9cdfa4db0d2f480b0df9084d3acca46fbf953001b157fa90e1c59050bc0153ad80610c24e3fb2ddfdb0b8a338b6b00641990ab313e50fb6bdb01c7364dae3108f6e25788c1e15020e5447d79752f358", @generic="d7d32eca8d6f68f34d6b54d9ffa7927f09f5ae054ce0897fd998725e932098b6f250d5527c910464200f2008b2c414bd65b0267df31782eb460c98694ed5211cdf551e5d98e257ed55d6370264119171d00811eceb43eef5a0da4864ded7dd317f55b7734f334b8cf1f3698083cde5bce04808429d6053111b930c35e1a9ec3fed3cc3a79f", @generic="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", @generic="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"]}, @generic="fa0c083574a73e557a708cfa47fb73ce452fde2f49f0396ccba7a2da52b7b349c90550706b04491efe7a5b0dccfa7528f060137dd09e9086d567e13c254e27c1a61f99900db8566f4e163fb0137b2fdd1e2a8a501b1795853531e4b9891290c6f7bb47f1db310773764b02f4521b8720ed47a640f0aba10b8dae5bfdd07199a4d3305ddc98f6a0053d54ce335d4e32540f6286ead4f962cd5f117689decfd36a4951c9b652d80458b5db7b0742bd147723a547cb"]}, 0x46a8}, 0x1, 0x0, 0x0, 0x80}, 0x2)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r8, 0x0, r8)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r9, 0x0, r9)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f00000049c0)=[@mss={0x2, 0x9}, @timestamp, @timestamp, @sack_perm, @timestamp, @sack_perm, @window={0x3, 0x9, 0x8000}, @mss={0x2, 0x60be}], 0x8)

[ 1741.264708][T26128] binder: 26127:26128 ioctl c0306201 20000200 returned -14
10:07:16 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/65, &(0x7f00000000c0)=0x41)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})

10:07:16 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x3c)
ptrace$cont(0x18, r4, 0x0, 0x0)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000500)=<r5=>0x0)
getpgid(r5)
ptrace$cont(0x20, r4, 0x0, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
r6 = open(&(0x7f0000000180)='./bus\x00', 0x84980, 0xbc)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xac, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000001}, 0x800)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$TUNGETFILTER(r6, 0x801054db, &(0x7f00000004c0)=""/54)
r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x800, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xb40708d59fe87520}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv6_getanyicast={0x14, 0x3e, 0x800, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x8000)

10:07:16 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'nr0\x00', 0x2}, 0x285)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
setsockopt$inet6_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000480)=@ccm_128={{0x304}, "f6add4e759cd9938", "5f6de184519b9506030a33fb8efeb51c", "a707f72a", "b747afca61108543"}, 0x28)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="046303931f85d1f0a8b563c7e7e6781968bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc7d5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1741.655264][T26172] binder: 26165:26172 ioctl c0306201 20000200 returned -14
10:07:16 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:16 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp1\x00', 0x8000, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:16 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})

10:07:16 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r6, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb15439da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000480), 0x4)
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:17 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x23c, 0x0, &(0x7f0000000040)=[@acquire, @decrefs, @increfs, @exit_looper, @acquire, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0})

10:07:17 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000140)=0x14)
r5 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r7, 0x0, r7)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r8, 0x0, r8)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r9, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r10 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r10, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r11 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r11, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r12 = openat$ion(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/ion\x00', 0x0, 0x0)
r13 = gettid()
ptrace$setopts(0x4206, r13, 0x0, 0x0)
tkill(r13, 0x3c)
ptrace$cont(0x18, r13, 0x0, 0x0)
ptrace$setregs(0xd, r13, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r13, 0x0, 0x0)
socketpair(0x8000000000001e, 0x805, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000080)={0x0, <r15=>0x0}, &(0x7f0000000100)=0xc)
keyctl$get_persistent(0xe, r15, 0x0)
r16 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r16, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
fstat(r16, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0})
r18 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r18, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r19 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r19, 0x8915, &(0x7f0000000080)={'tunl0\x00', @ifru_ivalue=0x4})
r20 = socket$inet_sctp(0x2, 0x5, 0x84)
r21 = socket$phonet_pipe(0x23, 0x5, 0x2)
r22 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r22, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
sendmsg$unix(r10, &(0x7f0000000bc0)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000340)="51c3f5f37a65e31df42e1de5711a090ab528a2ba0f7503543fe63ddeaf51e02f3a97e25f7954c1abcb6f6c3d7541b6e465017f2d944bc74c0f89742a6de75323c95537aff8b9d0791713271997ff11a9c8f462641eb640667429727b6ee73524a9ee132d4d890b46048df4db1cd4a02997088eacadead96d0e18e31266280afea476123b463195dea0c3f257145857eb749950ad1cc35a2ff2b44ea061ddc9801de2a3e3e72a91159ee62253", 0xac}, {&(0x7f0000000400)="c7e0aa66d18ad7451a4502710ec84c68cc51b678e6fadbfd91ad5a5803949f2d5f157b6431572dba93a0fee6174eae4cff290138613e717f2c7098b635676e64e35532f745e69c5d435295aac583c8e66a48578250417ca2d45af013a84e4c0933fcbd59d362e8e9b41e54f0b176f936952a798f1a376d4477b68c46b51fd2546cf5089cd66eccba968d05227a10163926045eec585b0b8af83f19096570a49ed9a8cd9b3c3b4f370a7e51b2e1", 0xad}, {&(0x7f0000000180)}, {&(0x7f00000005c0)="11b454e46c28d1a03adcec1b9207877c1d4f5e20831a72092d48ac643cbb1e5c32dc8f52677af7036bcb987f708fde7712c71748fc9a8db33628f10b38f0da5eee901fb3fd9dba46dd2e119395480a5827ab6ad35242e4277beb595dbc52d698ac1fc8375cb385a350b9ab0b9aa5b8a21cbd6055a11a28fa7fc718faa7fd7afc1ed2cf051cb0fb9467723ebe9d40156fdd346ee46439401f384f775371e59340c87aff352cbc2370861afd8bc3e5683e5a2819f565c616939409f010e085af2623469013dc8df8fe4a8366d4d4d774d59ece11eb02ae1d1b45ab1373425256b21ae9ba1234b79cd12024d0457756a9f395fb42ca3dd4", 0xf6}, {&(0x7f00000006c0)="59347451ef9d9dc015a11f6d2b399b3723fbffe1b543b8b0212a5739ac0f0e7eea2dcc4acd9e6adc96a320cc4f8ade47a28a6249a2bd9e8ac728579e77046c2dd8b3eba239e415260a80e8c113adb4cccd2802b500e53dc20d47601a72c72dc14c1647b73e361e857534751a56d0d90297bffa87535a64455909a2a56acb69b5b6e1b5093e1ccade63eff53341de1b51942070e61c97cbaa3b952a350f644935c84f073eba22b953c45e00fa022062730344251b5190f9125251444f71be957e4e676657159ce1245404168613216f9728a91e70f60114587a744aa67c8bdf159832b3d3fed8ad37dc3f90177246d351ad1a7857", 0xf4}, {&(0x7f00000007c0)="f701851856864c4696a4ecb7afbfad2c44d678e49e97c4d3d943a53ea84dadf67123fd8bd48b802a4dae1d31940b2fd3d2e88f6ecfef3855c49dbc823840d53b414a635eb65954ac5957b9c4884e", 0x4e}, {&(0x7f0000000840)="e6d2b24fde910dd29d7d52c54b077f526259b7f340656096c2a4281cccf6f7f217f2b388eb120209ad67a94e3fbb536de495b8908c60fd22affcfcb5a6b08d40d4ab711c9d6e36354d355144e8b52e92f5abeb8fc1f5154342a05860c17a865bcaee93c8f0554278475be44f49134a65be97b043df2a9b4dcc610077f2ea3c19da8aadf8d5140e4e2a59010c10b8b99e84a9a531af0da036af23501cebf220e6288091faa111f2515356d0f3e96eb5e1a5c1a3ca57927f23c8018b5eebd84dc9f736b1d47af7d261942fb09d18fe07545dcbddabb52a59ddc95486c35773d03d0136da18cd89caadb382f10808e1cda1e3d3921cec0b7d", 0xf7}, {&(0x7f0000000240)="ffd48ff2f025fc5d9715522a75d12a9d30", 0x11}, {&(0x7f0000000940)="96a539b00f87100e86670612ce4262e8c895f381c7e32cdb9c8391c185dd6084a7181c6f2c5f97fa91ec377ab276edaa97ea110462071b6ba8a0ac12459f72453a", 0x41}], 0x9, &(0x7f0000000b40)=[@rights={{0x20, 0x1, 0x1, [r11, r12, r5, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r13, r15, r17}}}, @rights={{0x24, 0x1, 0x1, [r18, r7, r19, r20, r8]}}, @rights={{0x18, 0x1, 0x1, [r21, r22]}}], 0x80, 0x204c000}, 0x811)
r23 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r23, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r24=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xffffffffffffffa7)
keyctl$get_persistent(0x16, r24, 0xfffffffffffffffd)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:17 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8004}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfa}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x10004080)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1742.371199][T26368] binder: 26364:26368 unknown command 0
[ 1742.377884][T26368] binder: 26364:26368 ioctl c0306201 20000000 returned -22
[ 1742.397327][T26365] binder: 26362:26365 ioctl c0306201 20000200 returned -14
10:07:17 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000140)={{0x2, 0x4e22, @multicast1}, {0x6, @random="b60f674c31a5"}, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'syzkaller0\x00'})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:17 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r3 = openat$cgroup_ro(r2, &(0x7f0000000480)='memory.events\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x6, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x38}}, 0x4000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:17 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x1, 0x6, 0x100, 0x70bd25, 0x25dfdbfe, {0x54d50dc7ec676d74, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x81)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80)='nl80211\x00')
r5 = socket(0x100000000011, 0x2, 0x0)
bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0}, &(0x7f0000000340)=0x14)
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x73b571ef52ffeddd}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000)

10:07:17 executing program 0:
ioprio_set$pid(0x1, 0x0, 0x800004000)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000080)={0x10000, "a7c118a299421cb959eeb3ef12a21b75026d8bdb0a86dbcdcce9fc296f3446d9", 0x1, 0x1})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$RTC_AIE_ON(r2, 0x7001)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
pwrite64(r0, &(0x7f00000001c0)="b9648bcb008024a572956fcb0053cc17f68636d283ea181ab5ac0cd0f2649ec7e6c027ebc37ec41b265853a6e4f30071c289f19340dfe1fb2a00f56b13de7fbc929c7e7eb122723356c3d5e742629ee91dbbbba982f4fc90531ccd17b564193de90d1dc65b6ad51e7e622f0bc9b8b0a7c3c4ed1028ecb8f022c497c3b40bb0f4e58cd3c3ba33f569db71047ce14cc0995c4a3a470ce6db80c59d31d3489d3cc3022c9a1b7db9a91054be54c2482bb4b83fb301926adb4cff43bf96b4a70cc3a4dcd1faceff08138b25ca", 0xca, 0x80)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet(0x2, 0x4cf5867dd03c0f15, 0x6)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000180)={0x990000, 0x0, 0x27, r3, 0x0, &(0x7f0000000140)={0x200a7, 0xe1ffc4c, [], @p_u8=&(0x7f0000000100)=0xfc}})
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f00000000c0)=[0xffffffff, 0x400])

[ 1742.785954][T26433] binder: 26432:26433 ioctl c0306201 20000200 returned -14
10:07:18 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000180)={0x3, 0x0, [{}, {}, {}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r4, r2, &(0x7f000005b000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaae08, 0x58, 0x0, 0x0)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r7, 0x0, r7)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000140)={'veth0_to_bond\x00', 0x600})
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:18 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$UI_DEV_DESTROY(r2, 0x5502)
r3 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x3)

10:07:18 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'hsr0\x00', @ifru_data=0x0})
r1 = socket(0x8, 0x5, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
getsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000000), &(0x7f0000000040)=0x10)

10:07:18 executing program 5:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x94240f43262c4049}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="3b040076d7632e57336e6cb658087ea41bd937858877525cdda344"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x20001000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000140)={{0x14, @broadcast, 0x4e24, 0x1, 'fo\x00', 0x10, 0x5, 0x6b}, {@multicast2, 0x4e23, 0x10000, 0x7ff, 0x0, 0x7}}, 0x44)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:07:18 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000002c0)={0x5, 0x0, [{0x6, 0x3, 0x0, 0x0, @sint={0x200, 0xffffffff}}, {0x4, 0x4, 0x0, 0x0, @irqchip={0x4136, 0x80000000}}, {0x6, 0x4, 0x0, 0x0, @msi={0x4, 0x8, 0x1, 0x1}}, {0x54e, 0x2, 0x0, 0x0, @adapter={0x6, 0x800, 0x4, 0x1000, 0x28}}, {0xafcc, 0x3, 0x0, 0x0, @sint={0x6}}]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[ 1743.245360][T26586] binder: 26578:26586 ioctl c0306201 20000200 returned -14
10:07:18 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffe96, 0x0, &(0x7f0000000000)=[@register_looper], 0xffffffffffffff33, 0x0, 0x0})
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000000240)=0x7)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x3, 0xc, 0x4, 0x2000000, 0xfe0a, {r1, r2/1000+30000}, {0x5, 0xc, 0x1, 0xd2, 0x1c, 0x1, "a32c2d20"}, 0x5, 0x3, @userptr=0xfffffffffffffffa, 0x8, 0x0, <r5=>r3})
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x1004, 0x0)
socket$alg(0x26, 0x5, 0x0)
ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000180)={0x6, 0x7, 0x401, 0x6800, r6})

10:07:18 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000480)={@mcast2, 0x9, 0x1, 0x0, 0x6, 0xf6, 0x3}, &(0x7f00000004c0)=0x20)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
syz_open_dev$mice(&(0x7f0000000500)='/dev/input/mice\x00', 0x0, 0x60c80)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1743.594756][T26671] binder: 26669:26671 ioctl c0306201 20000200 returned -14
10:07:18 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x4, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:18 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, 0x0)
dup2(r2, r3)
ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[0x8, 0x2b, 0x100, 0x40, 0x7, 0xfffffffc, 0xfffffffa, 0x7ff]})
r4 = accept4$tipc(r1, 0x0, &(0x7f0000000000), 0x1000)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x8916, &(0x7f0000000080)={'tunl0\x00', @ifru_hwaddr=@random="afcc7fc984ca"})
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcsa\x00', 0x2000, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r9=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000000)={r9}, 0x10)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000980)={r9, @in6={{0xa, 0x4e22, 0x7fffffff, @rand_addr="1cce511b3d6301e61295fd48be357779", 0x10000000}}}, 0x84)
r10 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r11 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r11, 0x80046402, 0x0)
dup2(r10, r11)
ioctl$DRM_IOCTL_RM_MAP(r11, 0x4028641b, &(0x7f00000001c0)={&(0x7f0000ffe000/0x1000)=nil, 0x3, 0x0, 0x4, &(0x7f0000ffd000/0x2000)=nil, 0x1})
getsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000040)={'ip6gre0\x00', 0x6c7a})
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="5900000077d4071442317be3d002f2bbd43c41b7c62911000000000000", @ANYRES16=r13, @ANYBLOB="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"], 0x40}}, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x50000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r13, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000)

10:07:18 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)
prctl$PR_GET_TIMERSLACK(0x1e)

10:07:19 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
sendto$inet(r3, &(0x7f0000000140)="027074ea0b04d6e4", 0x8, 0x3df830e3584fcdaf, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1744.089682][T26807] binder: 26799:26807 ioctl c0306201 20000200 returned -14
10:07:19 executing program 1:
r0 = socket(0x11, 0x4, 0x0)
socket(0xa, 0x3, 0x6)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_mtu=0x3ff})
ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000000)=0x2)
r1 = semget$private(0x0, 0x0, 0x0)
semctl$SEM_STAT(r1, 0x0, 0x12, &(0x7f00000000c0)=""/226)

10:07:19 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r3, r0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000240)={0x1, 'ip6gretap0\x00', 0x3}, 0x18)
r6 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r6, 0xc0385720, &(0x7f0000000100)={0x1})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f00000000c0)={0x0, 0xfffffffd, &(0x7f0000000480)=""/136, &(0x7f0000000540)=""/147, &(0x7f00000003c0)=""/144, 0x10000})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:19 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0)
ioctl$BLKPG(r1, 0x1269, &(0x7f0000000040)={0x8, 0x7, 0x8b, &(0x7f0000000240)="dc34b4613a3920e48d9c3046ad24da70e0d2a5dceca95797cff787bb922f627bb5d96a1a651406ae673816b9852b70c8174e36496dbb68b034bbe33488b5fd705d7d5abc10add950a7ed73b723ad0d8ee5b7ab0eb476a5d336412d3d33298fdf4fe352fd7bd999ab9539d4126c2e74fdc0dd119526409699890d33cab1c4ae5476b0e1b26c34a00f734ab4"})
ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000180)={0xffff, 0x95, 0x2, 0x8001, 0x0, 0x0, 0x101})
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00')
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000000c0)=[@acquire], 0xffffffffffffffc3, 0x0, 0x0})

[ 1744.574351][T26903] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gretap0, syncid = 3, id = 0
10:07:19 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={<r9=>0x0, r8, 0x0, 0x5, &(0x7f0000000140)='user\x00'}, 0x30)
perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x40, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4169, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0xe}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x2}, r9, 0x0, 0xffffffffffffffff, 0x3)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = fcntl$dupfd(r10, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
ioctl$NBD_SET_TIMEOUT(r11, 0xab09, 0x800)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r12, 0x0, r12)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
r14 = fcntl$dupfd(r13, 0x0, r13)
ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r6, 0xae80, 0x0)

10:07:19 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})

[ 1744.723848][T26933] QAT: Invalid ioctl
[ 1744.743428][T26933] QAT: Invalid ioctl
10:07:19 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140))
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:19 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
munlockall()
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1745.055284][T27008] binder: 26998:27008 ioctl c0306201 20000200 returned -14
10:07:20 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x100000001)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x800, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r5 = semget(0x0, 0x1, 0xa0)
semctl$GETZCNT(r5, 0x0, 0xf, &(0x7f0000000200)=""/83)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:20 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000000)={0x1, 0x81})
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x9, 0x3e, 0x0, 0xe9, 0x20, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x4, 0x2}, 0x10810, 0x400, 0x0, 0x4, 0x4f, 0x4, 0x3}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xa)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r4 = fcntl$dupfd(r3, 0xc0a, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000040)={{0x1, 0x4}, 'port0\x00', 0x8, 0x800, 0x6, 0x80, 0x7, 0x4, 0x400, 0x0, 0x3, 0x7f})
socket(0x0, 0x4, 0x5)

10:07:20 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x200000, 0x0)
ioctl$VT_SETMODE(r2, 0x5602, &(0x7f00000004c0)={0x8, 0x1, 0x6, 0x2, 0x3})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000500)={<r4=>0x0, @local, @broadcast}, &(0x7f0000000540)=0xc)
lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000640)={{{@in=@rand_addr=0x5, @in=@multicast2, 0x4e20, 0x1, 0x4e24, 0x3f, 0x2, 0x20, 0x20, 0xdcb895dc237bc366, r4, r5}, {0xd6, 0x95, 0x3, 0x8000, 0x2, 0x5, 0x10000, 0x119}, {0x6, 0x81, 0x3, 0x9}, 0x1, 0x6e6bb3, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x8, 0x4d3, 0xff}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2, 0x8, 0xd3f4, 0x3, 0x337}}, 0xe8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r9, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:20 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000140)={0x4, 0x7, 0x5, 0x401})
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:20 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
mmap$perf(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r5, 0x101)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0xc0a, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x500200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket(0x400000000010, 0x2, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
write(r9, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
r10 = fcntl$dupfd(r8, 0x0, r8)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
read$snddsp(r12, &(0x7f00000004c0)=""/208, 0xd0)
getpeername$l2tp(r7, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000600)=0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r10, 0x6}, 0x10)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000100)={0x1})
r13 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x400, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(r13, 0x5016, 0x0)

[ 1745.671544][T27133] binder: 27116:27133 ioctl c0306201 20000200 returned -14
10:07:20 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffe09, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r8=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={r8}, 0x10)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000140)={r8, 0x1, 0x46, "29ff419cbeceb032433479d17d737c632b1f0d4d21a410b321c22dde8111cbab8da31470c46dac08669456c44c44e282fa625ddcb7da67ac8b727c4f9d8cb1f4d1f317d27a11"}, 0x4e)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r9, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r10 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r10, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r13=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r11, 0x84, 0x0, &(0x7f0000000000)={r13}, 0x10)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f0000000200)={<r14=>r13, 0x1}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f00000002c0)={r14, 0xaf, "1b6d8598f3347a108c83bb745cfc67ab764699ee77b74915fbba69f2d73f5d1779d26d532a0a739111065e75acaa5f86d68f13bf42c76163fd0bd873ef6ece526b81923a5f57c906602d3e82df3b972f52eda0c15d35aca23fb9d3705f0d3a7d017621cea27c4f24ce9b9e3cc0337287a2fe8a8452a8ed791d8aa95c0c7ae2a7316123a373e5bab91d1a004dd94538eea32de5e5079434c29b6bc7c3d2cdc3821ce6c77d08602641836983e9caff7c"}, &(0x7f0000000380)=0xb7)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:21 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x5000)
write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="680000002902000700000010000000000000000000000000d1000000000000000407002e2f66696c65300404000000080000000000000000000000000000000207002e2f66696c65305203000000050000000000000001000000000000000907002e2f66696c6530"], 0x68)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000140)=0x2c)

10:07:21 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000500)=0x50)
r2 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000540)='/dev/full\x00', 0x4000, 0x0)
sendmsg$nl_crypto(r7, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x12010201}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)=@getstat={0xe0, 0x15, 0x0, 0x70bd2b, 0x25dfdbff, {{'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, [], [], 0x200, 0x400}, ["", "", "", "", "", "", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x4040)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
mmap$snddsp(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x200000b, 0x20010, r7, 0x2000)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r6, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:21 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='sockfs\x00', 0x2a0006, &(0x7f0000000240)='user\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:21 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0)
fcntl$dupfd(r4, 0x0, r4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:21 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
mmap$perf(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r5, 0x101)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0xc0a, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x500200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket(0x400000000010, 0x2, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
write(r9, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
r10 = fcntl$dupfd(r8, 0x0, r8)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
read$snddsp(r12, &(0x7f00000004c0)=""/208, 0xd0)
getpeername$l2tp(r7, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000600)=0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r10, 0x6}, 0x10)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000100)={0x1})
r13 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x400, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(r13, 0x5016, 0x0)

[ 1746.291163][T27212] binder: 27210:27212 ioctl c0306201 20000200 returned -14
10:07:21 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0xcd9d, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="0208020d070000002cbd7000fddbdf2505001800ffd92000fb1cf66be3189b963f360f1be34087fb69efcd3e368f1be2286aa2e723943900"], 0x38}}, 0x8c)
ioctl$sock_ifreq(r1, 0x8916, &(0x7f0000000080)={'veth0_to_bridge\x00', @ifru_flags=0x4200})
sendto$phonet(r1, &(0x7f00000000c0)="0b769882631bc59cb87bccb0225420f53b0600a6d8c605b4ab27f6a540ddee424d476bafff04364ceae2ee9a1334075a532c6fcce6b01cad75f100adef97439b50d2fbbf4b5adb9fb4f875a066dd6119622bf941b13bc3a1808dc06775785ba89d3e078cebc21ed66b32c4ff961cbfbfe937c1f7d1ed5feba2eb9dea8f5e96f8dc80cd3f3ecc61bdf015872251f338ea2a3edd26d307fa1fefd5a288f2a0341be52a2bc051edab0a333006715d2fc3072650d8fea828084de48b", 0xba, 0x4010005, &(0x7f0000000000)={0x23, 0x9, 0x1, 0xb4}, 0x10)

10:07:21 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
write$FUSE_POLL(r5, &(0x7f0000000140)={0x18, 0xfffffffffffffffe, 0x7, {0x7f}}, 0x18)
r6 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:21 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_STREAMOFF(r8, 0x40045613, &(0x7f00000004c0)=0xe4)
r9 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = fcntl$dupfd(r10, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r11, 0xc0385720, &(0x7f0000000100)={0x1})
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = fcntl$dupfd(r12, 0x0, r12)
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
ioctl$VHOST_SET_VRING_ADDR(r13, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:21 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000000)={0x7, 0x401, 0x3, 0x0, 0x0, [{{r2}, 0xffffffff}, {{r0}, 0x2}, {{r3}, 0x1}]})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$P9_RLCREATE(r5, &(0x7f0000000240)={0x18, 0xf, 0x1, {{0xa0, 0x2, 0x7}}}, 0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clock_gettime(0x0, &(0x7f00000000c0)={<r6=>0x0, <r7=>0x0})
ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)={0x6, 0x2, 0x4, 0x4000000, 0x7, {r6, r7/1000+10000}, {0x1, 0x8, 0x0, 0x7, 0x5, 0xbf, "5223fb12"}, 0x6, 0x7, @planes=&(0x7f0000000100)={0x3, 0x3bbc, @fd, 0x12}, 0x96, 0x0, <r8=>r0})
ioctl$EVIOCGID(r8, 0x80084502, &(0x7f00000001c0)=""/90)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})

[ 1746.778972][T27270] binder: 27267:27270 ioctl c0306201 20000200 returned -14
10:07:21 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
mmap$perf(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r5, 0x101)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0xc0a, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x500200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket(0x400000000010, 0x2, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
write(r9, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
r10 = fcntl$dupfd(r8, 0x0, r8)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
read$snddsp(r12, &(0x7f00000004c0)=""/208, 0xd0)
getpeername$l2tp(r7, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000600)=0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r10, 0x6}, 0x10)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000100)={0x1})
r13 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x400, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(r13, 0x5016, 0x0)

10:07:22 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r2 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, 0x0)
dup2(r1, r2)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r3=>0x0})
ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000040)={r3})

10:07:22 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
signalfd(r1, &(0x7f0000000480)={0x8df}, 0x8)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:22 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r4, &(0x7f0000000140), &(0x7f0000000200)=""/80}, 0x20)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:22 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r3)
add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0x0)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1747.161497][T27350] binder: 27348:27350 ioctl c0306201 20000200 returned -14
10:07:22 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x5c, r7, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80000c0}, 0x4008050)
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r8, 0x0, r8)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = fcntl$dupfd(r9, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KDSETMODE(r5, 0x4b3a, 0x1)

10:07:22 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})
sendto$unix(r0, &(0x7f0000000000)="6c261d495367a5cb7beed10e4c85d26bc2d24e5550ce8908f9c62d69c5e9ea3727f870a778bb6195236c1cbf2fa877d41cbe0e94bb1fcdd1469e31f31cee4741e56a58ca44", 0x45, 0x10, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)

10:07:22 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d7062d1177be746ba33402ce01dc784609dfc555fafad093a391ac60000000022ebe9cf1f86453a0bf4ce0df4a4da8b8c3f4680cd30b8fb0ef12838b70b4ebcf57b00"/129], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:22 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
mmap$perf(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r5, 0x101)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0xc0a, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x500200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket(0x400000000010, 0x2, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
write(r9, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
r10 = fcntl$dupfd(r8, 0x0, r8)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
read$snddsp(r12, &(0x7f00000004c0)=""/208, 0xd0)
getpeername$l2tp(r7, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000600)=0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r10, 0x6}, 0x10)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000100)={0x1})
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x400, 0x0)

10:07:22 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dde8b9660f38220101442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x4f}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1747.647635][T27376] binder: 27373:27376 ioctl c0306201 20000200 returned -14
10:07:22 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r3 = dup3(r2, r0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = gettid()
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20833, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x1, 0x0, 0x3, 0xfffffffc}, r5, 0x0, r3, 0x8)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0x0)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

10:07:22 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair(0x8000000000001e, 0x805, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, <r5=>0x0}, &(0x7f0000000100)=0xc)
r6 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
r7 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000003c0)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0x10000}])
lseek(r6, 0x0, 0x4)
keyctl$get_persistent(0xe, r5, 0x0)
r9 = socket(0x10, 0x3, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_CLOCK(r11, 0x4030ae7b, &(0x7f0000000500)={0x10000})
ioctl$sock_ifreq(r9, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r12=>0x0}, &(0x7f0000000140)=0xc)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x800, 0x42, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r13=>0x0})
getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x10, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r12}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0xfffffffffffffff9}}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x2e00}}], [{@fsuuid={'fsuuid', 0x3d, {[0x30, 0x33, 0x66, 0x34, 0x0, 0x39, 0x30, 0x64], 0x2d, [0x32, 0x9, 0x30, 0x36], 0x2d, [0x30, 0x35, 0x31, 0x37], 0x2d, [0x37, 0x31, 0x68, 0x61], 0x2d, [0x65, 0x39, 0x33, 0x64, 0x33, 0x66, 0x64, 0x34]}}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r13}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffffffff8000}}, {@dont_measure='dont_measure'}, {@dont_measure='dont_measure'}]}})
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})

10:07:22 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b00500673d3da2b793d405000000c9133ba76e538ecf8829b08f7f45ae000020"})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000eb8000/0x11000)=nil, 0x11000}, &(0x7f00000004c0)=0x10)
r4 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r5, 0x80184151, &(0x7f0000000600)={0x0, &(0x7f0000000540)="3622ba0f8e0637cab3a61fc1aed8adbae1d41f4b04d50569c6c3fe15771b77673fed8bd2da973aec0f886548822e65ba8b84e61ccd6382c14e3288c9d00a02fbbac1abf91761979571b81c7eb1746d4ab4f9a98e8456673d426576e0a59bea7c4495beec4edd00d5425b49fa87247ea8ac023796da67a6167f9551256ec4ab0f0c7415b67c454b43cf400a744b65b5b8b74bc75f322827a8b140e082920431627a05bee3e251653cbb98", 0xaa})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180))
getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000680)=<r7=>0x0, &(0x7f00000006c0)=0x4)
bind$packet(r4, &(0x7f0000000700)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="3b4a01056fe8"}, 0x14)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144, 0x100000})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=ANY=[], 0xfffffffffffffdb7, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:23 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
mmap$perf(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r5, 0x101)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0xc0a, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x500200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket(0x400000000010, 0x2, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
write(r9, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
r10 = fcntl$dupfd(r8, 0x0, r8)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
read$snddsp(r12, &(0x7f00000004c0)=""/208, 0xd0)
getpeername$l2tp(r7, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000600)=0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r10, 0x6}, 0x10)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000100)={0x1})

10:07:23 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x9a5f7f9a039bd71d, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r6, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc7847d9dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce3f7034b0df5f218ae30000fc70ffde6136085922ef3bbb443a01c4f2bd393facaac59bfacce6b02f7864f32521197cf2ce0b71fe036e255ae7e05b2c4cb38fc530dce2d7f47932f0844305c486dbc51079ad5e0b06c7df26e8916d46012bd099aaf62a08021becd7f9529b5adcd3ae"], 0xffffffffffffffc3, 0x0, 0x0})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x4, 0x8, 0x80, 0x5}, {0x6f3d, 0x1, 0x1, 0x2}]})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:23 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x8000, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000180)={'hsr0\x00', 0x9})
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000140)=0x4, 0x4)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
gettid()
fcntl$dupfd(r5, 0x0, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:23 executing program 1:
r0 = socket(0x9, 0x800, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})
socket(0xb36fcdf9b091f0a6, 0x4, 0x5)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000002c0)=""/246)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = dup3(r3, r4, 0x0)
ioctl$EVIOCGREP(r8, 0x8004745a, &(0x7f0000d1df52)=""/174)
ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000000))

[ 1748.376044][T27509] binder: 27506:27509 ioctl c0306201 20000200 returned -14
10:07:23 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="f24c9ed9", @ANYRES16=r4, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)="127345c0abd573b753cfe89726b8dfbfceee8c5e4c6ac7f038b1e9948c468163b4d2bcacd0cf5f8472ce15c0670a03b622d781568cd9f05dbd3b9bec41f5241328f1e501e97c567aeb505fbfbf4a33a054cf298bec1f5ed80d1a890e981bc65953331acca1bf45c7cd49be427f6402362552984117cc0c57ecdb14dda1282e9a5db42f51ef2ccb328f5c3dda26bad773686d82534a849b08adad2f4c0bb7ae4964c556f404294703fca9caffac4c1075641dfe86bfc632f5308571927dc04e029a6ed0b1a91590", &(0x7f0000000600)="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", 0xc7, 0x1000})
bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfc, 0x84482}, 0xc)

10:07:23 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
mmap$perf(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r5, 0x101)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0xc0a, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x500200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket(0x400000000010, 0x2, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
write(r9, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
r10 = fcntl$dupfd(r8, 0x0, r8)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
read$snddsp(r12, &(0x7f00000004c0)=""/208, 0xd0)
getpeername$l2tp(r7, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000600)=0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r10, 0x6}, 0x10)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000100)={0x1})

10:07:23 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000004c0)={0xfffffffd, 0x9a427c64fd688a35, 0x4, 0x4000000, 0x3bad7d08, {}, {0x0, 0x0, 0x3f, 0x5, 0xa4, 0x1, "5b0d5fba"}, 0xffffffe1, 0x4, @planes=&(0x7f0000000480)={0x6, 0x2, @userptr=0x4, 0x7e}, 0x8d2b, 0x0, <r2=>0xffffffffffffffff})
ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000540)='syz0\x00')
r3 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r3, 0x8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r8, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:24 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x7, 0x71c940)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000200)={0x3f, 0x3, 0x7, 0x3, &(0x7f00000002c0)=[{}, {}, {}]})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:07:24 executing program 1:
socket(0x22, 0xa, 0x5)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x894a, &(0x7f0000000080)={'vcan0\x00', @ifru_data=0x0})

10:07:24 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$binfmt_misc(r2, &(0x7f0000000480)={'syz0', "f43b9394e3c668ef3d773a0eb7d4dc758be7d620dadd104a10fb0af2239604743c420e91ce49fb6bb1155966ee9b3f8da48029babb837a4e2bca"}, 0x3e)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:24 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
mmap$perf(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r5, 0x101)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0xc0a, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x500200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket(0x400000000010, 0x2, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
write(r9, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
r10 = fcntl$dupfd(r8, 0x0, r8)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
read$snddsp(r12, &(0x7f00000004c0)=""/208, 0xd0)
getpeername$l2tp(r7, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000600)=0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r10, 0x6}, 0x10)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000100)={0x1})

10:07:24 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'bond_slave_0\x00', @ifru_data=0x0})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket(0x11, 0x3, 0x1)
ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="3241ebcd16377e96879b873b361853ff480df1a5831db789b87e1b71c233b15022", 0x21)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58)
ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000000))

10:07:24 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0xc5fda9c648f4e2b6, 0x0, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2900000000000000000003000000200001000c00020008000100000000001000010069623a6970365f7651693000"], 0x34}}, 0x0)
sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x41000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xb4, r5, 0xb148e46b74b14dd8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcf8}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40100c0}, 0x90)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r7, 0x0, r7)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:24 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000000480)=0x5)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a35d65223e88527db50f6f31bf174bd87b8521b551ff5008d8227a2ec9e63ee30f0eb8aef868edc8949df850ce6261f00e76a0a77488b49cab44a5ce580c4846a8abe918cfce207369462ff2223ce76341348e04b94bbe027557283681a79618f281adfaa"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:24 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r2, 0x406, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:24 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
mmap$perf(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r5, 0x101)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0xc0a, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x500200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket(0x400000000010, 0x2, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
write(r9, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
r10 = fcntl$dupfd(r8, 0x0, r8)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
read$snddsp(r12, &(0x7f00000004c0)=""/208, 0xd0)
getpeername$l2tp(r7, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000600)=0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r10, 0x6}, 0x10)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x400, 0x0)

10:07:24 executing program 1:
r0 = socket(0x9, 0x3, 0xff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x81100, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={<r4=>0x0, @in6={{0xa, 0x4e24, 0x1000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x100}}, 0x2, 0x7}, &(0x7f0000000040)=0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r4, @in6={{0xa, 0x4e20, 0x1, @empty, 0x8}}, 0x5, 0x6ca}, 0x90)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000000c0))
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})

[ 1749.720301][T27680] binder: 27668:27680 ioctl c0306201 20000200 returned -14
10:07:24 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r4 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
r6 = fcntl$dupfd(r4, 0x406, 0xffffffffffffffff)
connect$rxrpc(r6, &(0x7f00000002c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205648, &(0x7f0000000200)={0x9f0000, 0x7, 0x3e26, <r10=>r3, 0x0, &(0x7f0000000180)={0x990906, 0x5, [], @p_u16=&(0x7f0000000140)=0x8}})
setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000240)=0x1000000, 0x4)
r11 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:25 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
syz_extract_tcp_res(&(0x7f0000000480), 0x1f, 0x9)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x7)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r6, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000540)={0x0, 0x15, 0x8a, 0xfffd, 0x42, 0x8, &(0x7f00000004c0)="db1f3d508f50f953754871128ef9f11c04471c6e1f331af21acb682c84ef6c56a1e580246b576cb082f6c911437f63dabe2e082c79de7feb8d4c84c0bd753f0f5e02"})
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r7, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
getsockopt$inet6_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000580)=""/25, &(0x7f00000005c0)=0x19)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0463044000000000fc607ff990774fe6174e46a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e678f8d37c7d0ba9e670a358375f62d1177b0500000000000000c784609dfc391ac6aeded5d122ebe92505799452370cac67df66e57c1e5513a3f9bdb600"/114], 0xffffffffffffffc3, 0x0, 0x0})
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r8, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f0000000600)={0x1, 'team_slave_0\x00', {}, 0x9b8})
truncate(&(0x7f0000000640)='./file0\x00', 0x1ff)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r9, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r9, 0x84, 0x15, &(0x7f0000000180)={0xfe}, 0x1)

10:07:25 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8936, &(0x7f0000000080)={'netdevsim0\x00', @ifru_data=0x0})
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0)

[ 1750.136699][T27789] binder: 27788:27789 ioctl c0306201 20000200 returned -14
10:07:25 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clock_gettime(0x0, &(0x7f0000000140)={<r5=>0x0, <r6=>0x0})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = socket$isdn(0x22, 0x3, 0x24)
ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000200)={0x7fffffff, 0x0, 0x4, 0x400e1200, 0x5, {r5, r6/1000+30000}, {0x1, 0xc, 0x0, 0x5, 0x0, 0x0, "79461d0f"}, 0x5, 0xa0cffe70d2550b10, @fd=r8, 0x4, 0x0, r9})
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r10, 0x0, r10)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r11, 0x0, r11)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:25 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f0000000140)='user\x00', 0x0, 0x0, 0x160, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f0000000180)={0x6, 0x8, 0x4})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:25 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
mmap$perf(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r5, 0x101)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0xc0a, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x500200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket(0x400000000010, 0x2, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
write(r9, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
r10 = fcntl$dupfd(r8, 0x0, r8)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
read$snddsp(r12, &(0x7f00000004c0)=""/208, 0xd0)
getpeername$l2tp(r7, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000600)=0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r10, 0x6}, 0x10)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x400, 0x0)

10:07:25 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4)
syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7fff, 0x20000)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x101000, 0x0)
write$FUSE_DIRENT(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="880000000000000001000000000000000000000000000000ff0700000000000009000000000000002f6465762f6b766d000000000000000004000000000000080500000000000000070000000700000074727573746564000600000000000000070000000000000012000000070000002f6465762f696e7075742f6d6f75736523000000000000002560fee7cc3496845bcfe7cc32747782baa1b6325879955f589d4d7dcd7729826316b892a323e647c82dcce546992e3682ffaf3746ebf43b29e5cddb6f3789d6871191c27ca2df896f010a92211a93384d42b5af0936f002dbf611945c2d839f45f49d0df14dd49eeab8e85ffc"], 0x88)
r7 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:25 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})
r1 = socket(0x10, 0x3, 0x0)
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040))
ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f00000000c0))
ioctl$sock_ifreq(r1, 0x62485e366bfbe9c1, &(0x7f0000000080)={'netdevsim0\x00', @ifru_flags=0x2000})
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000))
epoll_wait(0xffffffffffffffff, &(0x7f0000000100)=[{}, {}], 0x2, 0xec20)

10:07:25 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x4000)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000180))
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r7 = socket(0x10, 0x3, 0x0)
r8 = gettid()
ptrace$setopts(0x4206, r8, 0x0, 0x0)
tkill(r8, 0x3c)
ptrace$cont(0x18, r8, 0x0, 0x0)
ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r8, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={<r9=>r8, r3, 0x0, 0x9, &(0x7f0000000700)='/dev/sg#\x00', 0xffffffffffffffff}, 0x30)
r10 = gettid()
ptrace$setopts(0x4206, r10, 0x0, 0x0)
tkill(r10, 0x3c)
ptrace$cont(0x18, r10, 0x0, 0x0)
ptrace$setregs(0xd, r10, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r10, 0x0, 0x0)
r11 = gettid()
ptrace$setopts(0x4206, r11, 0x0, 0x0)
tkill(r11, 0x3c)
ptrace$cont(0x18, r11, 0x0, 0x0)
ptrace$setregs(0xd, r11, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r11, 0x0, 0x0)
r12 = gettid()
ptrace$setopts(0x4206, r12, 0x0, 0x0)
tkill(r12, 0x3c)
ptrace$cont(0x18, r12, 0x0, 0x0)
ptrace$setregs(0xd, r12, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r12, 0x0, 0x0)
r13 = clone3(&(0x7f0000000980)={0x10000000, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800), {0x29}, &(0x7f0000000840)=""/163, 0xa3, &(0x7f0000000900)=""/35, &(0x7f0000000940)=[0x0, r12], 0x2}, 0x50)
clone3(&(0x7f0000000a40)={0x100, &(0x7f00000001c0), &(0x7f00000004c0), &(0x7f0000000500), {0x34}, &(0x7f0000000640)=""/20, 0x14, &(0x7f0000000680)=""/109, &(0x7f0000000a00)=[r9, r10, r11, r13], 0x4}, 0x50)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffdff, 0x0, &(0x7f0000000600)=ANY=[@ANYPTR64=&(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES16=r4, @ANYPTR64, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYRES16, @ANYRESHEX=r5, @ANYPTR64, @ANYRESOCT=r6], @ANYRESHEX=r3], @ANYRESHEX=r7], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:25 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r4 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180)='/dev/udmabuf\x00', 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r8, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
write$vhost_msg(r5, &(0x7f0000000200)={0x1, {&(0x7f00000002c0)=""/194, 0xc2, &(0x7f00000003c0)=""/230, 0x1, 0x1}}, 0x48)
ioctl$BLKTRACESTOP(r4, 0x1275, 0x0)
sendfile(r8, 0xffffffffffffffff, &(0x7f00000004c0)=0x7, 0x3f)

10:07:25 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000))
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x4, 0x9, 0x4, 0xe448cb05733422bf, 0x1d0, {}, {0x2, 0x1, 0xe5, 0xf7, 0x5, 0x8, "2e2054a3"}, 0x7, 0x3, @userptr, 0x0, 0x0, <r1=>r0})
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r2, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={<r5=>r2, r4, 0x0, 0xb, &(0x7f0000000040)='virt_wifi0\x00', 0xffffffffffffffff}, 0x30)
write$FUSE_LK(r1, &(0x7f0000000180)={0x28, 0x0, 0x4, {{0x9, 0xffffffffffffffd5, 0x2, r5}}}, 0x28)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})

10:07:26 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000480)=0x5)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
uselib(&(0x7f00000004c0)='./file0\x00')
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:26 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:26 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
read$usbfs(r3, &(0x7f0000000140)=""/87, 0x57)

10:07:26 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
mmap$perf(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r5, 0x101)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0xc0a, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x500200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket(0x400000000010, 0x2, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
write(r9, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
r10 = fcntl$dupfd(r8, 0x0, r8)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
read$snddsp(r12, &(0x7f00000004c0)=""/208, 0xd0)
getpeername$l2tp(r7, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000600)=0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r10, 0x6}, 0x10)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x400, 0x0)

10:07:26 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
mq_timedsend(r1, &(0x7f0000000040)="91cfdb01dd5dd419e544535590d9eb1e873cb0b1544d8c4717d7285c816a55bf9d923dd28c00290ec7428127784e8e64e1465af3b3e5a7c946f785481d01f06e625815bfa47dfcf16ff97709863ca450ec9c70247e68ea41bb45f8f1e60eb13456da50ac9678a06eca5856703b65ff9d895e4f1e149aa5f60e4c50139c7e36332f173662e5b116daa7c73b4c18a832a38a7a2e5f8d78de18ae44e5942da403e5eabcc4517ba2d71e7b47333e375331cdc02f394db4dec254f5919f0c7549e17e993d458af551f1207e9c84f411ddd91112997ae3fc82e4b2a5644facd3379a63e22649fe802d50cf8cd37c40bba8", 0xee, 0x1, &(0x7f0000000180)={r2, r3+30000000})
r4 = socket(0x2, 0x80000, 0xf9)
ioctl$sock_ifreq(r4, 0x8913, &(0x7f0000000000)={'syz_tun\x00', @ifru_data=0x0})

[ 1751.218229][T28032] binder: 28029:28032 ioctl c0306201 20000200 returned -14
10:07:26 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_dev$sndmidi(&(0x7f0000000480)='/dev/snd/midiC#D#\x00', 0x3, 0x100)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r6, 0x80045700, &(0x7f00000004c0))
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:26 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, &(0x7f0000000140))

10:07:26 executing program 1:
r0 = socket(0x11, 0x4, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r2 = dup3(r0, r1, 0x0)
ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000000)={0x8, "18d5c6d9752c6165ece07f7ea7110000000000000083cb6e7e8565e000", 0x3, 0x2, 0x3, 0x100000, 0x2, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f00000000c0)={0x0, 0x0, @ioapic})
listxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=""/11, 0xb)

10:07:26 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0xdc, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_FONT(r6, 0x4b60, &(0x7f0000000000)=""/36)
ioctl$VT_ACTIVATE(r6, 0x5606, 0xad2)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:27 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001700)={0x78, 0x0, &(0x7f0000000680)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f00000005c0)={@flat=@weak_binder={0x77622a85, 0xa, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/185, 0xb9, 0x0, 0x1a}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/72, 0x48, 0x0, 0x2b}}, &(0x7f0000000640)={0x0, 0x18, 0x40}}}, @release={0x40046306, 0x2}, @register_looper, @clear_death={0x400c630f, 0x2}, @register_looper, @release={0x40046306, 0x1}, @register_looper, @exit_looper, @register_looper], 0x1000, 0x0, &(0x7f0000000700)="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"})
r5 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f0000001740)={{0x2, @name="5d52a2b218efd8b96ddb95320309cffa55c32e3821a73e72a1bdd9b28178878f"}, "cee2be8f18f2568ff4c531422fde6ea11d62df9f1245ed1bf3bbb702fdf32195", 0x3})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000100)={0x1})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$USBDEVFS_RESETEP(r9, 0x80045503, &(0x7f0000001880)={0x1, 0x1})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="04630440000000eca476cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ca01dc784609dfc391ac6aeded50caccf1f86453a0bf4ce0df4a478ebc29ad4ba2a9d5a00"/102], 0xffffffffffffffc3, 0x0, 0x0})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001840)='/dev/sequencer\x00', 0x0, 0x0)
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:27 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
mmap$perf(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r5, 0x101)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0xc0a, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x500200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket(0x400000000010, 0x2, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
write(r9, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
r10 = fcntl$dupfd(r8, 0x0, r8)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
read$snddsp(r12, &(0x7f00000004c0)=""/208, 0xd0)
getpeername$l2tp(r7, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000600)=0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000100)={0x1})
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x400, 0x0)

[ 1752.179148][T28181] binder: 28179:28181 ioctl c0306201 20000200 returned -14
10:07:27 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r3}, 0x10)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r3, 0x3, 0x3}, 0xc)

10:07:27 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x2a120000}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffe, r4, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
semget(0x2, 0x2, 0x5c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r5 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x100000000, 0x28, 0x1})
r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x40, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r9, 0xc0506617, &(0x7f00000002c0)={{0x2, 0x0, @descriptor="15b83406dc51ddd3"}, 0xe8, [], "b301a22bc989718a2efbd50e6c3f9dc67bcb2a6a927956baf1a511cae0df1eb163b820ee7635dd1c1a96ad0d412e5be474dc85f00bcef15f26cc6ed453226e47f13ff392adfd77770c572d52fd21a5baaded347d2cd86d67e9f8f377ea71a10e9646452c28dc4971000b6b7e21b0cbbb7507d41f6b23e1efbfe068f073e438f803c2aaaf2daa9c0aba29d69aaa51d9be625133c2691f9c5f413bc3cd6974190fa401b8037a9eae92710d1c376b4e9f5a08f0fe9a44bb8f4fd172d6ef2912248b6611efc141e46e52a53f20e5f2f47a25bd386fc4dbf4e6c58e944ee405b7288b5046dd88cdebd9bc"})
ioctl$VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000140)={0x5f70, 0x32314752, 0x0, @stepwise={0x1a, 0x6, 0x6, 0x8000, 0x1}})
fcntl$dupfd(r6, 0x0, r6)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r10, 0x0, r10)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:27 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x200, 0x0)

10:07:27 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vsock\x00', 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:27 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000000)=0x6)

10:07:27 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r3)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x986152e0a202e710, r3)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:27 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
mmap$perf(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r5, 0x101)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0xc0a, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x500200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket(0x400000000010, 0x2, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
write(r9, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
r10 = fcntl$dupfd(r8, 0x0, r8)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
read$snddsp(r12, &(0x7f00000004c0)=""/208, 0xd0)
getpeername$l2tp(r7, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000600)=0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000100)={0x1})
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x400, 0x0)

[ 1752.729721][T28212] binder: 28201:28212 ioctl c0306201 20000200 returned -14
10:07:27 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42800002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x9, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x5}, [@NFCTH_POLICY={0xc, 0x4, {0x8, 0x5, 0xffff}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0xcf2d49f0}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x1)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})

10:07:28 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r7, 0x80045500, &(0x7f0000000480))
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:28 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000300)="66baf80cb834427380ef66bafc0cb8d554900099ddd660660fd1e3d8c5b9310a00000f3266ba4200b823fd0000ef0f770fc736", 0x33}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
eventfd2(0x72e2, 0x400)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1753.158408][T28297] binder: 28292:28297 ioctl c0306201 20000200 returned -14
10:07:28 executing program 1:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x81800)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040))
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000100)={0x10000030})
ioctl$sock_ifreq(r1, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})

10:07:28 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000480))
r6 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r6, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f00000004c0)={0x3})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:28 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x100, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r5, 0x28, &(0x7f0000000180)}, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:28 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000140)="baf80c66b840b2668266efbafc0c66b8dc00000066efbad10466ed0f011b0fc72ed29a3e3665f30f1ba20200b8d9008ec09a8fe500000fc719ba4200b013eebaf80c66b8daba918866efbafc0cb8edebef", 0x51}], 0x1, 0x4, 0x0, 0x0)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
r6 = creat(&(0x7f0000000080)='./bus\x00', 0x32)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000002c0)={<r7=>0x0, @in6={{0xa, 0x4e21, 0x3, @mcast2, 0x2}}, 0x1}, &(0x7f0000000240)=0x90)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000380)={r7, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}}}, &(0x7f0000000440)=0x84)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:28 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
mmap$perf(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r5, 0x101)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0xc0a, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x500200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket(0x400000000010, 0x2, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
write(r9, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
r10 = fcntl$dupfd(r8, 0x0, r8)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
read$snddsp(r12, &(0x7f00000004c0)=""/208, 0xd0)
getpeername$l2tp(r7, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000600)=0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000100)={0x1})
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x400, 0x0)

[ 1753.575926][T28333] binder: 28327:28333 ioctl c0306201 20000200 returned -14
10:07:28 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r7 = accept4$tipc(r3, &(0x7f0000000140)=@id, &(0x7f0000000180)=0x10, 0x80000)
ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f00000002c0)={0x2, 0xa3, 0x4, 0x3d39, 0x6, [{0x6, 0x4, 0xd9e5, [], 0x2000}, {0x100000000, 0x0, 0x3, [], 0x802}, {0x8, 0x8, 0xffffffffffffffff, [], 0x2008}, {0xfffffffffffeffff, 0xb7, 0x7, [], 0xa2f827c12ba94f6e}, {0x80000000, 0x2000, 0x7, [], 0x2900}, {0x5, 0x6bed, 0x1, [], 0x80}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:28 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000480), 0x4)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177b1199b02e402ce01dc784609dfc391ac6aeded5d122ebe92505799452270caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:28 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x4e001)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x6)
accept4(r3, &(0x7f0000000140)=@ipx, &(0x7f0000000200)=0x80, 0x800)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:29 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, r3, 0x0, 0x6, &(0x7f0000000040)='tunl0\x00', 0xffffffffffffffff}, 0x30)
r5 = geteuid()
r6 = geteuid()
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r7, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x2711}})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={<r8=>0x0, 0x7, 0x7}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x6, 0x7ff, 0x5, r8}, &(0x7f0000000280)=0x10)
getresgid(&(0x7f00000000c0), &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000140))
lchown(&(0x7f0000000080)='./file0\x00', r6, r9)
acct(&(0x7f0000000340)='./file0\x00')
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={r4, r5, r9}, 0xc)
r10 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20ncci\x00', 0x4faad5754781d4e5, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000300)={0xad94, 0x1, 0x6, 0x2, 0x1}, 0xc)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000001c0)={'bond_slave_1\x00', @ifru_flags=0x4000})
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0x1, 0x8)
r11 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r11, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})
r12 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r12, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
sendto(r12, &(0x7f0000000380)="842e4bf5c13fa91d0a25452dd7ff988905aa9a7a5af90d2c2b7b02975948e1264021da2cf94ac7325dd963cc0da93f051d9d6457d472053b40845ce999a8b553419c5253bc32f79957feabddf530cfa50e4437b53b37ca9b5c91181760d6083932e5c0748b5cfaefe5ea6fef4164de2e157de628c6c381a5ceb9d6f7e041fb2b235c7dc210a61b3520fb9f6c5f6487cd749d4d1f0e7a44b3f643354682da57b661c0cd2121c365f468011117e9ea68991e2d5b97908c1b03cc", 0xb9, 0x40004800, &(0x7f0000000440)=@nfc={0x27, 0x1, 0x1, 0x2}, 0x80)

[ 1753.960892][T28398] binder: 28396:28398 ioctl c0306201 20000200 returned -14
10:07:29 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
mmap$perf(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r5, 0x101)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0xc0a, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x500200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket(0x400000000010, 0x2, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
write(r9, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
r10 = fcntl$dupfd(r8, 0x0, r8)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
read$snddsp(r12, &(0x7f00000004c0)=""/208, 0xd0)
getpeername$l2tp(r7, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000600)=0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r10, 0x6}, 0x10)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000100)={0x1})
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x400, 0x0)

10:07:29 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000500))
r2 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r2, 0x8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000100)={0x1})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snapshot\x00', 0x40, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcsu\x00', 0x101000, 0x0)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r8, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000004c0)='tls\x00', 0xffffffffffffffec)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f0000000580)=""/159})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3203933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1754.272139][T28454] kvm [28441]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0xff
[ 1754.308914][T28454] kvm [28441]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0xfe
10:07:29 executing program 1:
r0 = socket(0xd, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})

[ 1754.359385][T28454] kvm [28441]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0xff
10:07:29 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffd, 0x2a120004}, 0x0, 0x0, 0x0, 0xfab70bbdf3a8a3f1, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$setpipe(r0, 0x407, 0x3)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1754.424241][T28454] kvm [28441]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0xfe
[ 1754.463254][T28454] kvm [28441]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0xff
10:07:29 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
utime(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x4, 0x3})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
getsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
r6 = fcntl$dupfd(r4, 0x0, r4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r8, 0xc0305616, &(0x7f0000000600)={0x0, {0x7ff, 0x10001}})
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r6, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
syz_open_dev$midi(&(0x7f0000000540)='/dev/midi#\x00', 0x4, 0x4004)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r9, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x6, 0x8100)
r11 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r11, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=ANY=[], 0xffffffffffffff13, 0x0, 0x0})
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/attr/exec\x00', 0x2, 0x0)
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

[ 1754.545539][T28454] kvm [28441]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0xfe
10:07:29 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
timer_delete(r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000140)=0x4, 0x4)
fcntl$dupfd(r5, 0x0, r5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:29 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
mmap$perf(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r5, 0x101)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0xc0a, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x500200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket(0x400000000010, 0x2, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
write(r9, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
r10 = fcntl$dupfd(r8, 0x0, r8)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
read$snddsp(r12, &(0x7f00000004c0)=""/208, 0xd0)
getpeername$l2tp(r7, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000600)=0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r10, 0x6}, 0x10)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000100)={0x1})
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x400, 0x0)

[ 1754.666332][T28454] kvm [28441]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0xff
[ 1754.741569][T28454] kvm [28441]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0xfe
[ 1754.785306][T28454] kvm [28441]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0xff
[ 1754.818886][T28454] kvm [28441]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0xfe
10:07:29 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000600)={0x2, 'bond0\x00', 0x3}, 0x3a336f8dcdec9e25)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r6, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000480))
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r9, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
sendmmsg$sock(r9, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000640)="0f860e47722be8f52d95dd62799f36e34a4a66f8fa37eaea3da4383c3f9a5dfd243aa3c1f7c7ff83d6befbb1fce2ecee7c68c3b59de2d8c895523422711113370a318d6b5bfdf1039a76684ac55d68a490847b5bd7ffb716b4379d12a15b12f08e8af0be65c6b134bffd961b03306e23e83042c2ca674d37f2e0f90c7c7ff401e79d6e1905359f8a8c90975362cb3700c317eb67e8ae9be48edd33648c5dcb2380ba585abf02802b9cf1b832727ea040c8fa49f109dade11b8f1b697fbf3a2cf7303dc38b300672233a9a49f4017b2c1766f0969703a94fde2728e32", 0xdc}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="1731060e771165e081e21cff2266978ae1c2fff4b8203ba247eea2b71da627c2600aa75af9756af758d8f78461dd69c3cce688a5a2f59e50eb434ae0a3a9410dd54ed8877ab628005f399b1fef79343ac812554323832a13613fdf7ae58b2283bc0f06838bb15a53c1c93ae252a92badb220cbcb2fbb22c30efee6bf1839426688877d92d98646995cd2d3bb2b30824a4809706be1fcb66fea904edcb6530dce3b48a6f7ffb329541a4dfecf47549bdbd5b52383b7520ca6ee19add3201f90667a4a", 0xc2}, {&(0x7f0000001840)="cf7a24fcdc090233e6728a32097759f39c9e04ec1b97d795b91feca6de616f4b9570aa35b7f9f4036997143caed2402931008d54018cee3167b496116f9c991ac56415dbbdf2d422e114ab70921fca6fecb921b79edc1cdfef0cad2c96d2bfebe565cabdd20e0066c9df8db00962a9eb0cd8c5d1e68aab88a7d8cfc566e5980d9a30cf33d38b28e30c8ecea2ce344ba1266bf971623379406835167645965465d5f340585e672d0c938ac4f60452f542f5f8dd0d18661e", 0xb7}], 0x4, &(0x7f0000001940)=[@txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x30}}, {{&(0x7f0000001980)=@in={0x2, 0x4e24, @rand_addr=0x5}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a00)="22de1e50def948dcb97863cb37fc103ba492df360338a439b0531a24f98758887f651417225eeff10815da04070e9a0f7e7e1a5b954cacef3499fdf7878fded81fca16c40cc2e4beddcedf22f657e788f101b7b2221fd290c12bd650f93cbad84f5c066c9e8d64da977d710e85b31a4534651fd0fedebcc74ff0f7b2d79ef9db210d9a2647f9ba82e9bfa93b04c702a0dc134c6a1c1a88d2e5854f1f91ba628d05cff7f08bc90daa2e8d269e47fe321828181cf9", 0xb4}, {&(0x7f0000001ac0)="635d097d6a154110009155cea500a9ddac5d0707ecdc8e6155dfd8f317d876394e75a1773a2efb1684d33456ebce9e5e4b6badec51b5059cc8fbd355eb87fceaba905abe1f014cafe5abdc536c7a0f186a94913e1e8e14470d", 0x59}], 0x2, &(0x7f0000001b80)=[@timestamping={{0x14, 0x1, 0x25, 0x400}}, @mark={{0x14, 0x1, 0x24, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffa}}, @mark={{0x14, 0x1, 0x24, 0x20}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0xc0}}], 0x2, 0x800)
ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000500)={0x4, @raw_data="e5427b00b78785cef44d36a8d278d3f479aecebedf5a2506cdf2079b1a9d1652766a627c5b7dd3c2156fb9437145960d91bb27ad5aaf23f9bee1131985ccd2e7408b2d86920bdcafa56946c9160f051b2fd5f5e7ee23488c9339e1b4ae6e744a28683d1dec4b9779a11893d2e256f27266fe9d0453cead5faa8a7203930d1cac2b7e8d0af3411528b33c0b392b09cd5b4710b7bb944719b7489860370e81c04d3c4eac639adf11c1a3a3454b574cfbac640ac5f762d1762e57786841e2f46e5779e032d227c2c74f"})
setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f00000004c0)=0x5, 0x4)

[ 1754.991785][T28516] binder: 28511:28516 ioctl c0306201 20000200 returned -14
10:07:30 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})

10:07:30 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000000)={0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x6, 0x0, 0x0, 0x6}, 0x0, 0x0, r5, 0x0)
r6 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0)
ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f0000000140)={0x50bb9fe4, 'syz0\x00'})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = fcntl$dupfd(r9, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$FIONREAD(r10, 0x541b, &(0x7f0000000200))
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f000004a000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_DEASSIGN_DEV_IRQ(r8, 0x4040ae75, &(0x7f0000000180)={0xfffffff7, 0x100, 0x7})
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r11, 0x0, r11)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = fcntl$dupfd(r12, 0x0, r12)
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:30 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0463144000000000a576165946cf9e4e715080ac3b03933f85d1f0a8b563c7eae67814b16039da03e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f8639abf63b453a0bf4ce0de4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:30 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
mmap$perf(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r5, 0x101)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0xc0a, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x500200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket(0x400000000010, 0x2, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
write(r9, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
r10 = fcntl$dupfd(r8, 0x0, r8)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
read$snddsp(r12, &(0x7f00000004c0)=""/208, 0xd0)
getpeername$l2tp(r7, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000600)=0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r10, 0x6}, 0x10)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000100)={0x1})
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x400, 0x0)

10:07:30 executing program 1:
socket(0x10, 0x3, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x105401, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'veth1_virt_wifi\x00', @ifru_data=0x0})

10:07:30 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000300), &(0x7f0000000340)=0x4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
getsockname(0xffffffffffffffff, &(0x7f00000009c0)=@pppol2tp={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000a40)=0x80)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
r9 = creat(&(0x7f0000000180)='./bus\x00', 0x110)
ioctl$KVM_SET_SIGNAL_MASK(r9, 0x4004ae8b, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r10 = openat$cgroup_ro(r8, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0)
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x5c, r11, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80000c0}, 0x4008050)
sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x12094088}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r11, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0x28}}, 0x8010)

[ 1755.476973][T28614] binder: 28613:28614 ioctl c0306201 20000200 returned -14
10:07:30 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x20000)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r5, 0xc06c4124, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:30 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:30 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7fc781468bfb14d39da06e9a2f89deb9a7d6062ac6a1dc784609dfc391ac6aeded5d1220600000000000080000caccf1f86453a0bf4ce0df4a49ad4ba2a9d0000000000000000"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:30 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000))
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})

[ 1755.923195][T28645] binder: 28635:28645 ioctl c0306201 20000200 returned -14
10:07:31 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
mmap$perf(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r5, 0x101)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0xc0a, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x500200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket(0x400000000010, 0x2, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
write(r9, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
r10 = fcntl$dupfd(r8, 0x0, r8)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
read$snddsp(r12, &(0x7f00000004c0)=""/208, 0xd0)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r10, 0x6}, 0x10)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000100)={0x1})
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x400, 0x0)

10:07:31 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000140)={0x2, 0x5, 0xe9, 0x0, 0x3, 0x5, 0x4, 0x9, 0x80, 0x1, 0x2, 0x0, 0x0, 0x10001, 0x4, 0x1f, 0x4, 0x5, 0x5, [], 0x9, 0x3})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:31 executing program 1:
syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00')
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})

10:07:31 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x3e, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={<r6=>0x0, 0x0, r5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={r6})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x4000, 0x1000, &(0x7f000004e000/0x1000)=nil})
r10 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r11 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x80c0, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r11, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x0, 0x45f2a8da0d82ad31, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40100}, 0x20000044)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r10, 0xc0984124, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000b00)=ANY=[@ANYBLOB="030000000091014000"])
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
write$binfmt_elf32(r12, &(0x7f0000001440)=ANY=[@ANYBLOB="7f454c46053f02ff0400000000000000000003008000000034000000380000008303000001000000010020000200a3930200010000000000535212e583649a83ffe492ce04c325187b7921c6501b51693f4bfbf966d724bdae6b3d2a2ced431a273e363b452889b33fc56b2bcab1a90580d0b37fa495f350b0422576dad77f1540886f98830fc5b2207db507b60acca234883d3a0b022f336f776079ff9c14dd04fcc0a8a47a7e7cf0198d70a0a4e6917f2871330b42207d5b816fe1e2275986c762ac2d51f99ab06ddb60dd33029c5be8252d1128181b0a50297dce6a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035f54267c66c1950a96fb8d10278480c2092aab579d2e8a1f5fb87329a493a1e32372ef831508156a504c2576fd63acb209c"], 0x80f)
r13 = fcntl$dupfd(r12, 0x0, r12)
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r9, 0xae80, 0x0)

10:07:31 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r8, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
r9 = dup3(r2, r8, 0x80000)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000005c0)={0x2, &(0x7f0000000580)=[{<r10=>0x0}, {}]})
ioctl$DRM_IOCTL_RM_CTX(r9, 0xc0086421, &(0x7f0000000600)={r10, 0x2})
r11 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r12, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r13, 0x0, 0x1b3}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r11, &(0x7f00000004c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000480), 0x1, r13, 0x60, 0x1, @ib={0x1b, 0x55, 0x9, {"4c428c1398261feb63e7c4dcae0a2905"}, 0x81, 0x2, 0x1ff}}}, 0xa0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r6, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
r14 = socket$inet6_tcp(0xa, 0x1, 0x0)
r15 = fcntl$dupfd(r14, 0x0, r14)
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200)
r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r17=>0xffffffffffffffff}, 0x13f}}, 0xffaf)
write$RDMA_USER_CM_CMD_SET_OPTION(r16, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r17, 0x0, 0x1b3}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {r17, 0x10, 0x0, @in={0x2, 0x4e23, @multicast1}}}, 0x90)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf3f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a000000000000000000"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:31 executing program 1:
socket(0x10, 0x3, 0xfe)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'vcan0\x00', &(0x7f00000000c0)=@ethtool_rx_ntuple={0x35, {0x10, @ah_ip4_spec={@remote, @multicast2, 0x3, 0x8}, @ah_ip4_spec={@multicast1, @multicast2, 0x8, 0x5}, 0x45, 0x7e, 0x401, 0x80000001, 0xffffffffffffffff}}})
syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x7ff, 0x4002)
ioctl$sock_ifreq(r1, 0x89b1, &(0x7f0000000080)={'syzkaller1\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$sock_ifreq(r0, 0x55, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})

10:07:31 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$P9_RVERSION(r4, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x8, 0x6, '9P2000'}, 0x13)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x8)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000300)="660f60ec2ef30f013b0fae0326673ef30fc7360f01ca660ffe0bf20f2a97ec3cbad00466b80058000066ef66b9b20b000066b82500000066ba000000000f30ba2100b8f7ffef"}], 0x1, 0x80, 0x0, 0x0)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000200)=0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r7, 0x0, r7)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:31 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:31 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
mmap$perf(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r5, 0x101)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0xc0a, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x500200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket(0x400000000010, 0x2, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
write(r9, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
r10 = fcntl$dupfd(r8, 0x0, r8)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
read$snddsp(r12, &(0x7f00000004c0)=""/208, 0xd0)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r10, 0x6}, 0x10)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000100)={0x1})
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x400, 0x0)

10:07:31 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x0, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=""/64, 0x40, 0x100, &(0x7f00000004c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x24}, 0x9}}, 0x24)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14d39da06e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:31 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x7})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0, 0xfffffffffffffc43}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[ 1756.983912][T28788] binder: 28786:28788 ioctl c0306201 20000200 returned -14
10:07:32 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_data=0x0})
r1 = socket$inet6(0xa, 0x800, 0x7)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x100, 0x101, 0x5}, 0x8)

10:07:32 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
open(&(0x7f0000000480)='./file1\x00', 0x0, 0x60)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000100)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/136, &(0x7f0000000300)=""/147, &(0x7f00000003c0)=""/144})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffd9c, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0463044000000000a576165946cf9e6e715080ac3b03933f85d1f0a8b563c7e7e6781468bfb14de10006e9a2f89deb9a7d6062d1177be746ba33402ce01dc784609dfc391ac6aeded5d122ebe92505799452370caccf1f86453a0bf4ce0df4a49ad4ba2a9d5ab0de181c140cf8c4befb9d9781a9077a0a995ee48301af4be3b344cfae1dd344ba299022cf715714901a58944447026d37ee5df10cfc258b9f17a5c3cba46b4dff198eea09deb2e7fb176c94189c5a86a1b907c554cb148da028d46f5288931ca182efb6c550dde110ae0a4205e95d860541ea889fbed2988077e761ace31d0b52ef326dbecc5e41b6f98b1a"], 0xffffffffffffffc3, 0x0, 0x0})
truncate(&(0x7f0000000000)='./file0\x00', 0x1ff)

10:07:32 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x2be, 0xfffffffffffffffb)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x8c180, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f00000002c0)={0x6, 0x0, 0x0, 'queue1\x00', 0x6})
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0xa29637bcfd0fad62, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f0000000200)={{0x6, 0x81}, 0x0, 0x3, 0xffffffff, {0x9, 0x1}, 0x81, 0x10001})
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$VIDIOC_G_EXT_CTRLS(r9, 0xc0205647, &(0x7f00000003c0)={0x990000, 0xb9, 0x4, <r10=>0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0x0, [], @value=0x6c8c}})
ioctl$SG_GET_LOW_DMA(r10, 0x227a, &(0x7f0000000400))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:32 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x800, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="29000000000000000000a103000000200001000c00020008000100000000001000010069623a6970365f76516930"], 0x34}}, 0x0)
sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x30084000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="fcd216000000", @ANYRES16=r5, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2a120000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r7, 0x0, r7)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:32 executing program 1:
socket(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4)

[ 1757.545181][T28811] binder: 28809:28811 ioctl c0306201 20000200 returned -14
10:07:32 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
mlock(&(0x7f0000055000/0x2000)=nil, 0x2000)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_elf64(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/5040], 0x13b0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b)
add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:07:32 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bond0\x00', 0x3}, 0x18)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x9a5f7f9a03b3f9dd, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
mmap$perf(&(0x7f0000e79000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r5, 0x101)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0xc0a, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x500200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket(0x400000000010, 0x2, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
write(r9, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
r10 = fcntl$dupfd(r8, 0x0, r8)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
read$snddsp(r12, &(0x7f00000004c0)=""/208, 0xd0)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r10, 0x6}, 0x10)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000100)={0x1})
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x400, 0x0)

[ 1757.862618][    C1] =====================================================
[ 1757.870052][    C1] BUG: KMSAN: uninit-value in __crc32c_le_base+0x4fa/0xd30
[ 1757.871869][    C1] CPU: 1 PID: 11117 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0
[ 1757.885817][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1757.891380][    C1] Call Trace:
[ 1757.891380][    C1]  <IRQ>
[ 1757.891380][    C1]  dump_stack+0x1c9/0x220
[ 1757.908307][    C1]  kmsan_report+0xf8/0x1e0
[ 1757.908307][    C1]  __msan_warning+0x58/0xa0
[ 1757.908307][    C1]  __crc32c_le_base+0x4fa/0xd30
[ 1757.922171][    C1]  chksum_update+0xb2/0x110
[ 1757.922171][    C1]  ? chksum_init+0xd0/0xd0
[ 1757.922171][    C1]  crypto_shash_update+0x4ed/0x550
[ 1757.922171][    C1]  ? sctp_chunk_free+0xb0/0xc0
[ 1757.922171][    C1]  ? sctp_packet_transmit+0x1ef6/0x4380
[ 1757.922171][    C1]  ? call_timer_fn+0x232/0x530
[ 1757.922171][    C1]  ? kmsan_internal_set_origin+0x6a/0xb0
[ 1757.922171][    C1]  ? __msan_poison_alloca+0xf0/0x120
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x4f/0x190
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1757.922171][    C1]  crc32c+0x150/0x220
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x6c/0xb0
[ 1757.922171][    C1]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1757.922171][    C1]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 1757.922171][    C1]  ? kmem_cache_free+0xbba/0x2d30
[ 1757.922171][    C1]  ? sctp_chunk_put+0x29e/0x420
[ 1757.922171][    C1]  sctp_csum_update+0x89/0xa0
[ 1757.922171][    C1]  __skb_checksum+0x12f7/0x1300
[ 1757.922171][    C1]  ? sctp_chunk_put+0x29e/0x420
[ 1757.922171][    C1]  ? __sctp_packet_append_chunk+0x1750/0x1750
[ 1757.922171][    C1]  sctp_packet_transmit+0x422d/0x4380
[ 1757.922171][    C1]  sctp_outq_flush+0x1823/0x5d80
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1757.922171][    C1]  ? __msan_metadata_ptr_for_store_1+0x13/0x20
[ 1757.922171][    C1]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  sctp_outq_uncork+0xd0/0xf0
[ 1757.922171][    C1]  sctp_do_sm+0x9105/0x9760
[ 1757.922171][    C1]  ? kmsan_internal_set_origin+0x6a/0xb0
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1757.922171][    C1]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 1757.922171][    C1]  ? run_posix_cpu_timers+0x39f/0x1dd0
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  ? kmsan_internal_set_origin+0x6a/0xb0
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  sctp_generate_heartbeat_event+0x3c6/0x5a0
[ 1757.922171][    C1]  call_timer_fn+0x232/0x530
[ 1757.922171][    C1]  ? sctp_do_sm+0x9760/0x9760
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1757.922171][    C1]  __run_timers+0xd60/0x1270
[ 1757.922171][    C1]  ? sctp_do_sm+0x9760/0x9760
[ 1757.922171][    C1]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[ 1757.922171][    C1]  ? irqtime_account_irq+0x4e/0x2d0
[ 1757.922171][    C1]  ? timers_dead_cpu+0x9d0/0x9d0
[ 1757.922171][    C1]  run_timer_softirq+0x2d/0x50
[ 1757.922171][    C1]  ? timers_dead_cpu+0x9d0/0x9d0
[ 1757.922171][    C1]  __do_softirq+0x4a1/0x83a
[ 1757.922171][    C1]  irq_exit+0x230/0x280
[ 1757.922171][    C1]  exiting_irq+0xe/0x10
[ 1757.922171][    C1]  smp_apic_timer_interrupt+0x48/0x70
[ 1757.922171][    C1]  apic_timer_interrupt+0x2e/0x40
[ 1757.922171][    C1]  </IRQ>
[ 1757.922171][    C1] RIP: 0010:apparmor_cred_prepare+0xb5/0x2d0
[ 1757.922171][    C1] Code: 48 89 d8 48 f7 d0 4c 21 e8 0f 84 1c 01 00 00 4d 85 ed 0f 84 24 01 00 00 e8 a8 8e 4d fd 48 85 db 0f 85 6b 01 00 00 49 8b 5d 00 <4c> 89 ef e8 63 26 b6 fd 48 8b 00 8b 0a 49 89 07 41 89 8f 88 0c 00
[ 1757.922171][    C1] RSP: 0018:ffffb38180fcf9a0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[ 1757.922171][    C1] RAX: ffffffff96d6b8c8 RBX: ffff9e4caf92dab0 RCX: 0000000000000000
[ 1757.922171][    C1] RDX: ffff9e4c34708000 RSI: 0000000000000000 RDI: ffffffffa2200090
[ 1757.922171][    C1] RBP: ffffb38180fcf9e0 R08: ffffd6b60000000f R09: ffff9e4cafffb000
[ 1757.922171][    C1] R10: 0000000000000029 R11: ffffffff96d6b820 R12: 0000000000000000
[ 1757.922171][    C1] R13: ffff9e4d2cd08090 R14: ffff9e4bc1500cc0 R15: ffff9e4c347089d0
[ 1757.922171][    C1]  ? apparmor_cred_free+0x340/0x340
[ 1757.922171][    C1]  ? apparmor_cred_prepare+0xa8/0x2d0
[ 1757.922171][    C1]  ? apparmor_cred_free+0x340/0x340
[ 1757.922171][    C1]  security_prepare_creds+0x22d/0x530
[ 1757.922171][    C1]  prepare_creds+0x60c/0x880
[ 1757.922171][    C1]  copy_creds+0x11d/0xac0
[ 1757.922171][    C1]  copy_process+0x201d/0x9720
[ 1757.922171][    C1]  ? kmsan_report+0x1b1/0x1e0
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x21/0x190
[ 1757.922171][    C1]  _do_fork+0x255/0xfa0
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x4f/0x190
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x4f/0x190
[ 1757.922171][    C1]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[ 1757.922171][    C1]  __se_sys_clone+0x35b/0x3a0
[ 1757.922171][    C1]  __x64_sys_clone+0x62/0x80
[ 1757.922171][    C1]  do_syscall_64+0xb6/0x160
[ 1757.922171][    C1]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1757.922171][    C1] RIP: 0033:0x45951a
[ 1757.922171][    C1] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1757.922171][    C1] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1757.922171][    C1] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 000000000045951a
[ 1757.922171][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1757.922171][    C1] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 0000000000c65940
[ 1757.922171][    C1] R10: 0000000000c65c10 R11: 0000000000000246 R12: 0000000000000001
[ 1757.922171][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1757.922171][    C1] 
[ 1757.922171][    C1] Uninit was stored to memory at:
[ 1757.922171][    C1]  kmsan_internal_chain_origin+0xc5/0x140
[ 1757.922171][    C1]  kmsan_memcpy_memmove_metadata+0x25c/0x2e0
[ 1757.922171][    C1]  kmsan_memcpy_metadata+0xb/0x10
[ 1757.922171][    C1]  __msan_memcpy+0x44/0x50
[ 1757.922171][    C1]  sctp_packet_transmit+0x1dd1/0x4380
[ 1757.922171][    C1]  sctp_outq_flush+0x1823/0x5d80
[ 1757.922171][    C1]  sctp_outq_uncork+0xd0/0xf0
[ 1757.922171][    C1]  sctp_do_sm+0x9105/0x9760
[ 1757.922171][    C1]  sctp_generate_heartbeat_event+0x3c6/0x5a0
[ 1757.922171][    C1]  call_timer_fn+0x232/0x530
[ 1757.922171][    C1]  __run_timers+0xd60/0x1270
[ 1757.922171][    C1]  run_timer_softirq+0x2d/0x50
[ 1757.922171][    C1]  __do_softirq+0x4a1/0x83a
[ 1757.922171][    C1] 
[ 1757.922171][    C1] Uninit was stored to memory at:
[ 1757.922171][    C1]  kmsan_internal_chain_origin+0xc5/0x140
[ 1757.922171][    C1]  kmsan_memcpy_memmove_metadata+0x25c/0x2e0
[ 1757.922171][    C1]  kmsan_memcpy_metadata+0xb/0x10
[ 1757.922171][    C1]  __msan_memcpy+0x44/0x50
[ 1757.922171][    C1]  sctp_addto_chunk+0x21c/0x430
[ 1757.922171][    C1]  sctp_make_heartbeat+0x4eb/0x700
[ 1757.922171][    C1]  sctp_sf_sendbeat_8_3+0x18d/0xb10
[ 1757.922171][    C1]  sctp_do_sm+0x2b4/0x9760
[ 1757.922171][    C1]  sctp_generate_heartbeat_event+0x3c6/0x5a0
[ 1757.922171][    C1]  call_timer_fn+0x232/0x530
[ 1757.922171][    C1]  __run_timers+0xd60/0x1270
[ 1757.922171][    C1]  run_timer_softirq+0x2d/0x50
[ 1757.922171][    C1]  __do_softirq+0x4a1/0x83a
[ 1757.922171][    C1] 
[ 1757.922171][    C1] Uninit was stored to memory at:
[ 1757.922171][    C1]  kmsan_internal_chain_origin+0xc5/0x140
[ 1757.922171][    C1]  kmsan_memcpy_memmove_metadata+0x25c/0x2e0
[ 1757.922171][    C1]  kmsan_memcpy_metadata+0xb/0x10
[ 1757.922171][    C1]  __msan_memcpy+0x44/0x50
[ 1757.922171][    C1]  sctp_make_heartbeat+0x3f7/0x700
[ 1757.922171][    C1]  sctp_sf_sendbeat_8_3+0x18d/0xb10
[ 1757.922171][    C1]  sctp_do_sm+0x2b4/0x9760
[ 1757.922171][    C1]  sctp_generate_heartbeat_event+0x3c6/0x5a0
[ 1757.922171][    C1]  call_timer_fn+0x232/0x530
[ 1757.922171][    C1]  __run_timers+0xd60/0x1270
[ 1757.922171][    C1]  run_timer_softirq+0x2d/0x50
[ 1757.922171][    C1]  __do_softirq+0x4a1/0x83a
[ 1757.922171][    C1] 
[ 1757.922171][    C1] Uninit was stored to memory at:
[ 1757.922171][    C1]  kmsan_internal_chain_origin+0xc5/0x140
[ 1757.922171][    C1]  kmsan_memcpy_memmove_metadata+0x25c/0x2e0
[ 1757.922171][    C1]  kmsan_memcpy_metadata+0xb/0x10
[ 1757.922171][    C1]  __msan_memcpy+0x44/0x50
[ 1757.922171][    C1]  sctp_transport_new+0x248/0xa20
[ 1757.922171][    C1]  sctp_assoc_add_peer+0x5ba/0x2120
[ 1757.922171][    C1]  sctp_process_init+0x162b/0x3e30
[ 1757.922171][    C1]  sctp_do_sm+0x1a59/0x9760
[ 1757.922171][    C1]  sctp_assoc_bh_rcv+0x9ef/0xdb0
[ 1757.922171][    C1]  sctp_inq_push+0x300/0x420
[ 1757.922171][    C1]  sctp_backlog_rcv+0x2eb/0x1240
[ 1757.922171][    C1]  __release_sock+0x448/0x640
[ 1757.922171][    C1]  release_sock+0x99/0x2a0
[ 1757.922171][    C1]  sctp_wait_for_connect+0x3d7/0x840
[ 1757.922171][    C1]  __sctp_connect+0x1e9d/0x1f20
[ 1757.922171][    C1]  sctp_setsockopt+0x91a3/0x18c00
[ 1757.922171][    C1]  sock_common_setsockopt+0x13b/0x170
[ 1757.922171][    C1]  __sys_setsockopt+0x7c3/0xa30
[ 1757.922171][    C1]  __se_sys_setsockopt+0xdd/0x100
[ 1757.922171][    C1]  __x64_sys_setsockopt+0x62/0x80
[ 1757.922171][    C1]  do_syscall_64+0xb6/0x160
[ 1757.922171][    C1]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1757.922171][    C1] 
[ 1757.922171][    C1] Local variable ----addr.i@sctp_process_init created at:
[ 1757.922171][    C1]  sctp_process_init+0x603/0x3e30
[ 1757.922171][    C1]  sctp_process_init+0x603/0x3e30
[ 1757.922171][    C1] =====================================================
[ 1757.922171][    C1] Disabling lock debugging due to kernel taint
[ 1757.922171][    C1] Kernel panic - not syncing: panic_on_warn set ...
[ 1757.922171][    C1] CPU: 1 PID: 11117 Comm: syz-executor.0 Tainted: G    B             5.5.0-rc1-syzkaller #0
[ 1757.922171][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1757.922171][    C1] Call Trace:
[ 1757.922171][    C1]  <IRQ>
[ 1757.922171][    C1]  dump_stack+0x1c9/0x220
[ 1757.922171][    C1]  panic+0x3c9/0xc1e
[ 1757.922171][    C1]  kmsan_report+0x1e0/0x1e0
[ 1757.922171][    C1]  __msan_warning+0x58/0xa0
[ 1757.922171][    C1]  __crc32c_le_base+0x4fa/0xd30
[ 1757.922171][    C1]  chksum_update+0xb2/0x110
[ 1757.922171][    C1]  ? chksum_init+0xd0/0xd0
[ 1757.922171][    C1]  crypto_shash_update+0x4ed/0x550
[ 1757.922171][    C1]  ? sctp_chunk_free+0xb0/0xc0
[ 1757.922171][    C1]  ? sctp_packet_transmit+0x1ef6/0x4380
[ 1757.922171][    C1]  ? call_timer_fn+0x232/0x530
[ 1757.922171][    C1]  ? kmsan_internal_set_origin+0x6a/0xb0
[ 1757.922171][    C1]  ? __msan_poison_alloca+0xf0/0x120
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x4f/0x190
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1757.922171][    C1]  crc32c+0x150/0x220
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x6c/0xb0
[ 1757.922171][    C1]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1757.922171][    C1]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 1757.922171][    C1]  ? kmem_cache_free+0xbba/0x2d30
[ 1757.922171][    C1]  ? sctp_chunk_put+0x29e/0x420
[ 1757.922171][    C1]  sctp_csum_update+0x89/0xa0
[ 1757.922171][    C1]  __skb_checksum+0x12f7/0x1300
[ 1757.922171][    C1]  ? sctp_chunk_put+0x29e/0x420
[ 1757.922171][    C1]  ? __sctp_packet_append_chunk+0x1750/0x1750
[ 1757.922171][    C1]  sctp_packet_transmit+0x422d/0x4380
[ 1757.922171][    C1]  sctp_outq_flush+0x1823/0x5d80
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1757.922171][    C1]  ? __msan_metadata_ptr_for_store_1+0x13/0x20
[ 1757.922171][    C1]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  sctp_outq_uncork+0xd0/0xf0
[ 1757.922171][    C1]  sctp_do_sm+0x9105/0x9760
[ 1757.922171][    C1]  ? kmsan_internal_set_origin+0x6a/0xb0
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1757.922171][    C1]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 1757.922171][    C1]  ? run_posix_cpu_timers+0x39f/0x1dd0
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  ? kmsan_internal_set_origin+0x6a/0xb0
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  sctp_generate_heartbeat_event+0x3c6/0x5a0
[ 1757.922171][    C1]  call_timer_fn+0x232/0x530
[ 1757.922171][    C1]  ? sctp_do_sm+0x9760/0x9760
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1757.922171][    C1]  __run_timers+0xd60/0x1270
[ 1757.922171][    C1]  ? sctp_do_sm+0x9760/0x9760
[ 1757.922171][    C1]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[ 1757.922171][    C1]  ? irqtime_account_irq+0x4e/0x2d0
[ 1757.922171][    C1]  ? timers_dead_cpu+0x9d0/0x9d0
[ 1757.922171][    C1]  run_timer_softirq+0x2d/0x50
[ 1757.922171][    C1]  ? timers_dead_cpu+0x9d0/0x9d0
[ 1757.922171][    C1]  __do_softirq+0x4a1/0x83a
[ 1757.922171][    C1]  irq_exit+0x230/0x280
[ 1757.922171][    C1]  exiting_irq+0xe/0x10
[ 1757.922171][    C1]  smp_apic_timer_interrupt+0x48/0x70
[ 1757.922171][    C1]  apic_timer_interrupt+0x2e/0x40
[ 1757.922171][    C1]  </IRQ>
[ 1757.922171][    C1] RIP: 0010:apparmor_cred_prepare+0xb5/0x2d0
[ 1757.922171][    C1] Code: 48 89 d8 48 f7 d0 4c 21 e8 0f 84 1c 01 00 00 4d 85 ed 0f 84 24 01 00 00 e8 a8 8e 4d fd 48 85 db 0f 85 6b 01 00 00 49 8b 5d 00 <4c> 89 ef e8 63 26 b6 fd 48 8b 00 8b 0a 49 89 07 41 89 8f 88 0c 00
[ 1757.922171][    C1] RSP: 0018:ffffb38180fcf9a0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[ 1757.922171][    C1] RAX: ffffffff96d6b8c8 RBX: ffff9e4caf92dab0 RCX: 0000000000000000
[ 1757.922171][    C1] RDX: ffff9e4c34708000 RSI: 0000000000000000 RDI: ffffffffa2200090
[ 1757.922171][    C1] RBP: ffffb38180fcf9e0 R08: ffffd6b60000000f R09: ffff9e4cafffb000
[ 1757.922171][    C1] R10: 0000000000000029 R11: ffffffff96d6b820 R12: 0000000000000000
[ 1757.922171][    C1] R13: ffff9e4d2cd08090 R14: ffff9e4bc1500cc0 R15: ffff9e4c347089d0
[ 1757.922171][    C1]  ? apparmor_cred_free+0x340/0x340
[ 1757.922171][    C1]  ? apparmor_cred_prepare+0xa8/0x2d0
[ 1757.922171][    C1]  ? apparmor_cred_free+0x340/0x340
[ 1757.922171][    C1]  security_prepare_creds+0x22d/0x530
[ 1757.922171][    C1]  prepare_creds+0x60c/0x880
[ 1757.922171][    C1]  copy_creds+0x11d/0xac0
[ 1757.922171][    C1]  copy_process+0x201d/0x9720
[ 1757.922171][    C1]  ? kmsan_report+0x1b1/0x1e0
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x21/0x190
[ 1757.922171][    C1]  _do_fork+0x255/0xfa0
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x4f/0x190
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x4f/0x190
[ 1757.922171][    C1]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[ 1757.922171][    C1]  __se_sys_clone+0x35b/0x3a0
[ 1757.922171][    C1]  __x64_sys_clone+0x62/0x80
[ 1757.922171][    C1]  do_syscall_64+0xb6/0x160
[ 1757.922171][    C1]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1757.922171][    C1] RIP: 0033:0x45951a
[ 1757.922171][    C1] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1757.922171][    C1] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1757.922171][    C1] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 000000000045951a
[ 1757.922171][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1757.922171][    C1] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 0000000000c65940
[ 1757.922171][    C1] R10: 0000000000c65c10 R11: 0000000000000246 R12: 0000000000000001
[ 1757.922171][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1757.922171][    C1] ------------[ cut here ]------------
[ 1757.922171][    C1] kernel BUG at mm/kmsan/kmsan.h:87!
[ 1757.922171][    C1] invalid opcode: 0000 [#1] SMP
[ 1757.922171][    C1] CPU: 1 PID: 11117 Comm: syz-executor.0 Tainted: G    B             5.5.0-rc1-syzkaller #0
[ 1757.922171][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1757.922171][    C1] RIP: 0010:kmsan_internal_check_memory+0x3e1/0x3f0
[ 1757.922171][    C1] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 4f 07 c7 a1 31 c0 e8 00 74 4a ff 0f 0b 0f 0b 0f 0b 0f 0b e8 11 92 4a ff 0f 0b <0f> 0b 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff 02
[ 1757.922171][    C1] RSP: 0018:ffffb38180ecfbf0 EFLAGS: 00010046
[ 1757.922171][    C1] RAX: 0000000000000002 RBX: 0000000005b40003 RCX: 0000000005b40003
[ 1757.922171][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffb38180ecfccc
[ 1757.922171][    C1] RBP: ffffb38180ecfc98 R08: 0000000000000000 R09: ffff9e4cafd43d90
[ 1757.922171][    C1] R10: 00000000ffffffff R11: ffffffff9898c7f0 R12: 0000000000000000
[ 1757.922171][    C1] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001
[ 1757.922171][    C1] FS:  0000000000c65940(0000) GS:ffff9e4cafd00000(0000) knlGS:0000000000000000
[ 1757.922171][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1757.922171][    C1] CR2: 0000000000738008 CR3: 000000004852a000 CR4: 00000000001426e0
[ 1757.922171][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1757.922171][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1757.922171][    C1] Call Trace:
[ 1757.922171][    C1]  <IRQ>
[ 1757.922171][    C1]  kmsan_check_memory+0xd/0x10
[ 1757.922171][    C1]  iowrite8+0x99/0x2e0
[ 1757.922171][    C1]  ? pvpanic_mmio_remove+0x60/0x60
[ 1757.922171][    C1]  pvpanic_panic_notify+0x46/0x70
[ 1757.922171][    C1]  atomic_notifier_call_chain+0x13d/0x240
[ 1757.922171][    C1]  panic+0x45a/0xc1e
[ 1757.922171][    C1]  kmsan_report+0x1e0/0x1e0
[ 1757.922171][    C1]  __msan_warning+0x58/0xa0
[ 1757.922171][    C1]  __crc32c_le_base+0x4fa/0xd30
[ 1757.922171][    C1]  chksum_update+0xb2/0x110
[ 1757.922171][    C1]  ? chksum_init+0xd0/0xd0
[ 1757.922171][    C1]  crypto_shash_update+0x4ed/0x550
[ 1757.922171][    C1]  ? sctp_chunk_free+0xb0/0xc0
[ 1757.922171][    C1]  ? sctp_packet_transmit+0x1ef6/0x4380
[ 1757.922171][    C1]  ? call_timer_fn+0x232/0x530
[ 1757.922171][    C1]  ? kmsan_internal_set_origin+0x6a/0xb0
[ 1757.922171][    C1]  ? __msan_poison_alloca+0xf0/0x120
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x4f/0x190
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1757.922171][    C1]  crc32c+0x150/0x220
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x6c/0xb0
[ 1757.922171][    C1]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1757.922171][    C1]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 1757.922171][    C1]  ? kmem_cache_free+0xbba/0x2d30
[ 1757.922171][    C1]  ? sctp_chunk_put+0x29e/0x420
[ 1757.922171][    C1]  sctp_csum_update+0x89/0xa0
[ 1757.922171][    C1]  __skb_checksum+0x12f7/0x1300
[ 1757.922171][    C1]  ? sctp_chunk_put+0x29e/0x420
[ 1757.922171][    C1]  ? __sctp_packet_append_chunk+0x1750/0x1750
[ 1757.922171][    C1]  sctp_packet_transmit+0x422d/0x4380
[ 1757.922171][    C1]  sctp_outq_flush+0x1823/0x5d80
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1757.922171][    C1]  ? __msan_metadata_ptr_for_store_1+0x13/0x20
[ 1757.922171][    C1]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  sctp_outq_uncork+0xd0/0xf0
[ 1757.922171][    C1]  sctp_do_sm+0x9105/0x9760
[ 1757.922171][    C1]  ? kmsan_internal_set_origin+0x6a/0xb0
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1757.922171][    C1]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 1757.922171][    C1]  ? run_posix_cpu_timers+0x39f/0x1dd0
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  ? kmsan_internal_set_origin+0x6a/0xb0
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  sctp_generate_heartbeat_event+0x3c6/0x5a0
[ 1757.922171][    C1]  call_timer_fn+0x232/0x530
[ 1757.922171][    C1]  ? sctp_do_sm+0x9760/0x9760
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1757.922171][    C1]  __run_timers+0xd60/0x1270
[ 1757.922171][    C1]  ? sctp_do_sm+0x9760/0x9760
[ 1757.922171][    C1]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[ 1757.922171][    C1]  ? irqtime_account_irq+0x4e/0x2d0
[ 1757.922171][    C1]  ? timers_dead_cpu+0x9d0/0x9d0
[ 1757.922171][    C1]  run_timer_softirq+0x2d/0x50
[ 1757.922171][    C1]  ? timers_dead_cpu+0x9d0/0x9d0
[ 1757.922171][    C1]  __do_softirq+0x4a1/0x83a
[ 1757.922171][    C1]  irq_exit+0x230/0x280
[ 1757.922171][    C1]  exiting_irq+0xe/0x10
[ 1757.922171][    C1]  smp_apic_timer_interrupt+0x48/0x70
[ 1757.922171][    C1]  apic_timer_interrupt+0x2e/0x40
[ 1757.922171][    C1]  </IRQ>
[ 1757.922171][    C1] RIP: 0010:apparmor_cred_prepare+0xb5/0x2d0
[ 1757.922171][    C1] Code: 48 89 d8 48 f7 d0 4c 21 e8 0f 84 1c 01 00 00 4d 85 ed 0f 84 24 01 00 00 e8 a8 8e 4d fd 48 85 db 0f 85 6b 01 00 00 49 8b 5d 00 <4c> 89 ef e8 63 26 b6 fd 48 8b 00 8b 0a 49 89 07 41 89 8f 88 0c 00
[ 1757.922171][    C1] RSP: 0018:ffffb38180fcf9a0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[ 1757.922171][    C1] RAX: ffffffff96d6b8c8 RBX: ffff9e4caf92dab0 RCX: 0000000000000000
[ 1757.922171][    C1] RDX: ffff9e4c34708000 RSI: 0000000000000000 RDI: ffffffffa2200090
[ 1757.922171][    C1] RBP: ffffb38180fcf9e0 R08: ffffd6b60000000f R09: ffff9e4cafffb000
[ 1757.922171][    C1] R10: 0000000000000029 R11: ffffffff96d6b820 R12: 0000000000000000
[ 1757.922171][    C1] R13: ffff9e4d2cd08090 R14: ffff9e4bc1500cc0 R15: ffff9e4c347089d0
[ 1757.922171][    C1]  ? apparmor_cred_free+0x340/0x340
[ 1757.922171][    C1]  ? apparmor_cred_prepare+0xa8/0x2d0
[ 1757.922171][    C1]  ? apparmor_cred_free+0x340/0x340
[ 1757.922171][    C1]  security_prepare_creds+0x22d/0x530
[ 1757.922171][    C1]  prepare_creds+0x60c/0x880
[ 1757.922171][    C1]  copy_creds+0x11d/0xac0
[ 1757.922171][    C1]  copy_process+0x201d/0x9720
[ 1757.922171][    C1]  ? kmsan_report+0x1b1/0x1e0
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x21/0x190
[ 1757.922171][    C1]  _do_fork+0x255/0xfa0
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x4f/0x190
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x4f/0x190
[ 1757.922171][    C1]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[ 1757.922171][    C1]  __se_sys_clone+0x35b/0x3a0
[ 1757.922171][    C1]  __x64_sys_clone+0x62/0x80
[ 1757.922171][    C1]  do_syscall_64+0xb6/0x160
[ 1757.922171][    C1]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1757.922171][    C1] RIP: 0033:0x45951a
[ 1757.922171][    C1] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1757.922171][    C1] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1757.922171][    C1] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 000000000045951a
[ 1757.922171][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1757.922171][    C1] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 0000000000c65940
[ 1757.922171][    C1] R10: 0000000000c65c10 R11: 0000000000000246 R12: 0000000000000001
[ 1757.922171][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1757.922171][    C1] Modules linked in:
[ 1757.922171][    C1] ---[ end trace e4eda156341ca9e3 ]---
[ 1757.922171][    C1] RIP: 0010:kmsan_internal_check_memory+0x3e1/0x3f0
[ 1757.922171][    C1] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 4f 07 c7 a1 31 c0 e8 00 74 4a ff 0f 0b 0f 0b 0f 0b 0f 0b e8 11 92 4a ff 0f 0b <0f> 0b 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff 02
[ 1757.922171][    C1] RSP: 0018:ffffb38180ecfbf0 EFLAGS: 00010046
[ 1757.922171][    C1] RAX: 0000000000000002 RBX: 0000000005b40003 RCX: 0000000005b40003
[ 1757.922171][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffb38180ecfccc
[ 1757.922171][    C1] RBP: ffffb38180ecfc98 R08: 0000000000000000 R09: ffff9e4cafd43d90
[ 1757.922171][    C1] R10: 00000000ffffffff R11: ffffffff9898c7f0 R12: 0000000000000000
[ 1757.922171][    C1] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001
[ 1757.922171][    C1] FS:  0000000000c65940(0000) GS:ffff9e4cafd00000(0000) knlGS:0000000000000000
[ 1757.922171][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1757.922171][    C1] CR2: 0000000000738008 CR3: 000000004852a000 CR4: 00000000001426e0
[ 1757.922171][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1757.922171][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1757.922171][    C1] Kernel panic - not syncing: Fatal exception in interrupt
[ 1757.922171][    C1] ------------[ cut here ]------------
[ 1757.922171][    C1] kernel BUG at mm/kmsan/kmsan.h:87!
[ 1757.922171][    C1] invalid opcode: 0000 [#2] SMP
[ 1757.922171][    C1] CPU: 1 PID: 11117 Comm: syz-executor.0 Tainted: G    B D           5.5.0-rc1-syzkaller #0
[ 1757.922171][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1757.922171][    C1] RIP: 0010:kmsan_internal_check_memory+0x3e1/0x3f0
[ 1757.922171][    C1] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 4f 07 c7 a1 31 c0 e8 00 74 4a ff 0f 0b 0f 0b 0f 0b 0f 0b e8 11 92 4a ff 0f 0b <0f> 0b 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff 02
[ 1757.922171][    C1] RSP: 0018:ffffb38180ecf6e0 EFLAGS: 00010002
[ 1757.922171][    C1] RAX: 0000000000000003 RBX: 000000000769010e RCX: 000000000769010e
[ 1757.922171][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffb38180ecf7bc
[ 1757.922171][    C1] RBP: ffffb38180ecf788 R08: 0000000000000000 R09: ffff9e4cafd43d90
[ 1757.922171][    C1] R10: 00000000ffffffff R11: ffffffff9898c7f0 R12: 0000000000000000
[ 1757.922171][    C1] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000001
[ 1757.922171][    C1] FS:  0000000000c65940(0000) GS:ffff9e4cafd00000(0000) knlGS:0000000000000000
[ 1757.922171][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1757.922171][    C1] CR2: 0000000000738008 CR3: 000000004852a000 CR4: 00000000001426e0
[ 1757.922171][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1757.922171][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1757.922171][    C1] Call Trace:
[ 1757.922171][    C1]  <IRQ>
[ 1757.922171][    C1]  kmsan_check_memory+0xd/0x10
[ 1757.922171][    C1]  iowrite8+0x99/0x2e0
[ 1757.922171][    C1]  ? pvpanic_mmio_remove+0x60/0x60
[ 1757.922171][    C1]  pvpanic_panic_notify+0x46/0x70
[ 1757.922171][    C1]  atomic_notifier_call_chain+0x13d/0x240
[ 1757.922171][    C1]  panic+0x45a/0xc1e
[ 1757.922171][    C1]  ? kmsg_dump+0x451/0x540
[ 1757.922171][    C1]  oops_end+0x2a5/0x2d0
[ 1757.922171][    C1]  die+0x124/0x140
[ 1757.922171][    C1]  do_invalid_op+0x612/0x8a0
[ 1757.922171][    C1]  ? kmsan_internal_check_memory+0x3e1/0x3f0
[ 1757.922171][    C1]  invalid_op+0x3d/0x50
[ 1757.922171][    C1] RIP: 0010:kmsan_internal_check_memory+0x3e1/0x3f0
[ 1757.922171][    C1] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 4f 07 c7 a1 31 c0 e8 00 74 4a ff 0f 0b 0f 0b 0f 0b 0f 0b e8 11 92 4a ff 0f 0b <0f> 0b 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff 02
[ 1757.922171][    C1] RSP: 0018:ffffb38180ecfbf0 EFLAGS: 00010046
[ 1757.922171][    C1] RAX: 0000000000000002 RBX: 0000000005b40003 RCX: 0000000005b40003
[ 1757.922171][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffb38180ecfccc
[ 1757.922171][    C1] RBP: ffffb38180ecfc98 R08: 0000000000000000 R09: ffff9e4cafd43d90
[ 1757.922171][    C1] R10: 00000000ffffffff R11: ffffffff9898c7f0 R12: 0000000000000000
[ 1757.922171][    C1] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001
[ 1757.922171][    C1]  ? pvpanic_mmio_remove+0x60/0x60
[ 1757.922171][    C1]  kmsan_check_memory+0xd/0x10
[ 1757.922171][    C1]  iowrite8+0x99/0x2e0
[ 1757.922171][    C1]  ? pvpanic_mmio_remove+0x60/0x60
[ 1757.922171][    C1]  pvpanic_panic_notify+0x46/0x70
[ 1757.922171][    C1]  atomic_notifier_call_chain+0x13d/0x240
[ 1757.922171][    C1]  panic+0x45a/0xc1e
[ 1757.922171][    C1]  kmsan_report+0x1e0/0x1e0
[ 1757.922171][    C1]  __msan_warning+0x58/0xa0
[ 1757.922171][    C1]  __crc32c_le_base+0x4fa/0xd30
[ 1757.922171][    C1]  chksum_update+0xb2/0x110
[ 1757.922171][    C1]  ? chksum_init+0xd0/0xd0
[ 1757.922171][    C1]  crypto_shash_update+0x4ed/0x550
[ 1757.922171][    C1]  ? sctp_chunk_free+0xb0/0xc0
[ 1757.922171][    C1]  ? sctp_packet_transmit+0x1ef6/0x4380
[ 1757.922171][    C1]  ? call_timer_fn+0x232/0x530
[ 1757.922171][    C1]  ? kmsan_internal_set_origin+0x6a/0xb0
[ 1757.922171][    C1]  ? __msan_poison_alloca+0xf0/0x120
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x4f/0x190
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1757.922171][    C1]  crc32c+0x150/0x220
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x6c/0xb0
[ 1757.922171][    C1]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1757.922171][    C1]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 1757.922171][    C1]  ? kmem_cache_free+0xbba/0x2d30
[ 1757.922171][    C1]  ? sctp_chunk_put+0x29e/0x420
[ 1757.922171][    C1]  sctp_csum_update+0x89/0xa0
[ 1757.922171][    C1]  __skb_checksum+0x12f7/0x1300
[ 1757.922171][    C1]  ? sctp_chunk_put+0x29e/0x420
[ 1757.922171][    C1]  ? __sctp_packet_append_chunk+0x1750/0x1750
[ 1757.922171][    C1]  sctp_packet_transmit+0x422d/0x4380
[ 1757.922171][    C1]  sctp_outq_flush+0x1823/0x5d80
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1757.922171][    C1]  ? __msan_metadata_ptr_for_store_1+0x13/0x20
[ 1757.922171][    C1]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  sctp_outq_uncork+0xd0/0xf0
[ 1757.922171][    C1]  sctp_do_sm+0x9105/0x9760
[ 1757.922171][    C1]  ? kmsan_internal_set_origin+0x6a/0xb0
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1757.922171][    C1]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 1757.922171][    C1]  ? run_posix_cpu_timers+0x39f/0x1dd0
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  ? kmsan_internal_set_origin+0x6a/0xb0
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x11e/0x190
[ 1757.922171][    C1]  sctp_generate_heartbeat_event+0x3c6/0x5a0
[ 1757.922171][    C1]  call_timer_fn+0x232/0x530
[ 1757.922171][    C1]  ? sctp_do_sm+0x9760/0x9760
[ 1757.922171][    C1]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 1757.922171][    C1]  __run_timers+0xd60/0x1270
[ 1757.922171][    C1]  ? sctp_do_sm+0x9760/0x9760
[ 1757.922171][    C1]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[ 1757.922171][    C1]  ? irqtime_account_irq+0x4e/0x2d0
[ 1757.922171][    C1]  ? timers_dead_cpu+0x9d0/0x9d0
[ 1757.922171][    C1]  run_timer_softirq+0x2d/0x50
[ 1757.922171][    C1]  ? timers_dead_cpu+0x9d0/0x9d0
[ 1757.922171][    C1]  __do_softirq+0x4a1/0x83a
[ 1757.922171][    C1]  irq_exit+0x230/0x280
[ 1757.922171][    C1]  exiting_irq+0xe/0x10
[ 1757.922171][    C1]  smp_apic_timer_interrupt+0x48/0x70
[ 1757.922171][    C1]  apic_timer_interrupt+0x2e/0x40
[ 1757.922171][    C1]  </IRQ>
[ 1757.922171][    C1] RIP: 0010:apparmor_cred_prepare+0xb5/0x2d0
[ 1757.922171][    C1] Code: 48 89 d8 48 f7 d0 4c 21 e8 0f 84 1c 01 00 00 4d 85 ed 0f 84 24 01 00 00 e8 a8 8e 4d fd 48 85 db 0f 85 6b 01 00 00 49 8b 5d 00 <4c> 89 ef e8 63 26 b6 fd 48 8b 00 8b 0a 49 89 07 41 89 8f 88 0c 00
[ 1757.922171][    C1] RSP: 0018:ffffb38180fcf9a0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[ 1757.922171][    C1] RAX: ffffffff96d6b8c8 RBX: ffff9e4caf92dab0 RCX: 0000000000000000
[ 1757.922171][    C1] RDX: ffff9e4c34708000 RSI: 0000000000000000 RDI: ffffffffa2200090
[ 1757.922171][    C1] RBP: ffffb38180fcf9e0 R08: ffffd6b60000000f R09: ffff9e4cafffb000
[ 1757.922171][    C1] R10: 0000000000000029 R11: ffffffff96d6b820 R12: 0000000000000000
[ 1757.922171][    C1] R13: ffff9e4d2cd08090 R14: ffff9e4bc1500cc0 R15: ffff9e4c347089d0
[ 1757.922171][    C1]  ? apparmor_cred_free+0x340/0x340
[ 1757.922171][    C1]  ? apparmor_cred_prepare+0xa8/0x2d0
[ 1757.922171][    C1]  ? apparmor_cred_free+0x340/0x340
[ 1757.922171][    C1]  security_prepare_creds+0x22d/0x530
[ 1757.922171][    C1]  prepare_creds+0x60c/0x880
[ 1757.922171][    C1]  copy_creds+0x11d/0xac0
[ 1757.922171][    C1]  copy_process+0x201d/0x9720
[ 1757.922171][    C1]  ? kmsan_report+0x1b1/0x1e0
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x21/0x190
[ 1757.922171][    C1]  _do_fork+0x255/0xfa0
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x4f/0x190
[ 1757.922171][    C1]  ? kmsan_get_metadata+0x4f/0x190
[ 1757.922171][    C1]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[ 1757.922171][    C1]  __se_sys_clone+0x35b/0x3a0
[ 1757.922171][    C1]  __x64_sys_clone+0x62/0x80
[ 1757.922171][    C1]  do_syscall_64+0xb6/0x160
[ 1757.922171][    C1]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1757.922171][    C1] RIP: 0033:0x45951a
[ 1757.922171][    C1] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1757.922171][    C1] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1757.922171][    C1] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 000000000045951a
[ 1757.922171][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1757.922171][    C1] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 0000000000c65940
[ 1757.922171][    C1] R10: 0000000000c65c10 R11: 0000000000000246 R12: 0000000000000001
[ 1757.922171][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1757.922171][    C1] Modules linked in:
[ 1757.922171][    C1] ---[ end trace e4eda156341ca9e4 ]---
[ 1757.922171][    C1] RIP: 0010:kmsan_internal_check_memory+0x3e1/0x3f0
[ 1757.922171][    C1] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 4f 07 c7 a1 31 c0 e8 00 74 4a ff 0f 0b 0f 0b 0f 0b 0f 0b e8 11 92 4a ff 0f 0b <0f> 0b 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff 02
[ 1757.922171][    C1] RSP: 0018:ffffb38180ecfbf0 EFLAGS: 00010046
[ 1757.922171][    C1] RAX: 0000000000000002 RBX: 0000000005b40003 RCX: 0000000005b40003
[ 1757.922171][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffb38180ecfccc
[ 1757.922171][    C1] RBP: ffffb38180ecfc98 R08: 0000000000000000 R09: ffff9e4cafd43d90
[ 1757.922171][    C1] R10: 00000000ffffffff R11: ffffffff9898c7f0 R12: 0000000000000000
[ 1757.922171][    C1] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001
[ 1757.922171][    C1] FS:  0000000000c65940(0000) GS:ffff9e4cafd00000(0000) knlGS:0000000000000000
[ 1757.922171][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1757.922171][    C1] CR2: 0000000000738008 CR3: 000000004852a000 CR4: 00000000001426e0
[ 1757.922171][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1757.922171][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1757.922171][    C1] Kernel panic - not syncing: Fatal exception in interrupt
[ 1757.922171][    C1] Kernel Offset: 0x12800000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[ 1757.922171][    C1] Rebooting in 86400 seconds..